[CLSA-2026:1794408321] tigervnc: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 14:45:34 UTC
Description:
- CVE-2026-93518: fix heap buffer overflow from 16-bit truncation of XKB syms/acts sizes in the bundled xorg-x11-server source - CVE-2026-93517: fix heap buffer overflow in GLX RenderLarge from unchecked dataBytes in the bundled xorg-x11-server source - CVE-2026-93519: fix heap buffer overflow from unbounded pointer barrier events in the bundled xorg-x11-server source - CVE-2026-93523: fix out-of-bounds heap write from unvalidated modifier values in ProcXIPassiveUngrabDevice in the bundled xorg-x11-server source - CVE-2026-88812: fix NULL text pointer after free in the XKB doodad error path in the bundled xorg-x11-server source - All carried by xorg-x11-server-source >= 1.20.4-99.el7_9.tuxcare.els17, no local patch; tigervnc-server-module now requires xorg-x11-server-Xorg >= 1.20.4-99.el7_9.tuxcare.els17 (XKB struct layout) - Built against xorg-x11-server-source 1.20.4-99.el7_9.tuxcare.els19, which also carries the CVE-2026-93521 and CVE-2026-93516 fixes into Xvnc
CVEs fixed:
Updated packages:
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:32185efe6052d2378a564a876130773b2f8889eeebedf26015b7a1cc3a9a7b4a
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:bd0cef35254ee21cc5b910c401ea9c1dbf80308c128ac1e9d2ec11f16c2b42fe
  • tigervnc-icons-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:66f39fad954e329971be8802281905433a8053293ac9003c0c20801c4ac193ae
  • tigervnc-license-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:3f3d6d23fa0d11e95811b121c7cb85a10d373f4d307a40c3f585f4f16ebedc43
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:1a87098c78fc6952a94362e2e59c6813bf19645dc7d017e0237be8d7c062a7b2
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:f218e321a0666802dc02d20de0309d85f0ada8aa356ec09ac0eccb7fa0124938
  • tigervnc-server-applet-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:fe2e27ff1d763aacf4d9e742c956365039cdd98e9af403c8903d4b34f23fee89
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:6b04668705066703e9ba543e1da17d2e457046cfda5f9b16f2962d0f017b07e1
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:a70a45f7ad4b7dbe74524d7eddf16dba8dc62a9bac5b17be78d4a4eec7e1be1f
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:89361530f8bd948f8504c382f880e035ef19d5fe2b65d879b83e16f8adc92b49
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:51eb56e478ba3546427156e82770a91e1952c02e42a64ac543a14d0b7ad5eab3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.