[CLSA-2026:1794408960] tigervnc: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 15:54:51 UTC
Description:
- CVE-2026-93518: fix heap buffer overflow from 16-bit truncation of XKB syms/acts sizes in the bundled xorg-x11-server source - CVE-2026-93517: fix heap buffer overflow in GLX RenderLarge from unchecked dataBytes in the bundled xorg-x11-server source - CVE-2026-93519: fix heap buffer overflow from unbounded pointer barrier events in the bundled xorg-x11-server source - CVE-2026-93523: fix out-of-bounds heap write from unvalidated modifier values in ProcXIPassiveUngrabDevice in the bundled xorg-x11-server source - CVE-2026-88812: fix NULL text pointer after free in the XKB doodad error path in the bundled xorg-x11-server source - All carried by xorg-x11-server-source >= 1.20.4-99.el7_9.tuxcare.els17, no local patch; tigervnc-server-module now requires xorg-x11-server-Xorg >= 1.20.4-99.el7_9.tuxcare.els17 (XKB struct layout) - Built against xorg-x11-server-source 1.20.4-99.el7_9.tuxcare.els19, which also carries the CVE-2026-93521 and CVE-2026-93516 fixes into Xvnc
CVEs fixed:
Updated packages:
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:fe57f82d087dfde072ba073883e89f2f0bed0a5bee2fb5001bb2f25418ae99eb
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:f4520c8cc77f86fc8d3ccd5d3cb1d54a068b9c5fb13af989fdb0bfa2558eaeb0
  • tigervnc-icons-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:2f1536f7a8a15c0588a25540e7533602ed2d06c01063e23ae15c91559e3c1e0c
  • tigervnc-license-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:aeab07945e39a4c5698181b8f3e2295a6f1a8538cb599e988a13aac84109015c
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:bff2ede7c4630d0d70766adbbb7533e6f0f02d74183d4af83cd84e9db28e2c4b
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:7e08143015c99cedc005260b78b5f98dc211940e0129ffc5a4fa3265bf9910f7
  • tigervnc-server-applet-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:d604a9293829aa8fa1987e21f4502eef87aa65b8086254c4ee15b9bdd5ffff22
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:54538212f83d87d7b2b42f538ce57466498cece71bd049b0917b28dae5b54d01
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:d68810dcb2bc4ed450617bfcf32b80ee9d7ade4ea9758c11e0dbe019dbd8bb29
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:0446ee68417dde366b45e51a038ced023f7b9ef048d450f2c1b2de906f0c7fd3
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:18c7b207b4141f8cbc6900854ab0271ba205d4b7fdd3f94bb31d97b9ddb210e2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.