[CLSA-2026:1794408317] tigervnc: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 14:45:28 UTC
Description:
- CVE-2026-93518: fix heap buffer overflow from 16-bit truncation of XKB syms/acts sizes in the bundled xorg-x11-server source - CVE-2026-93517: fix heap buffer overflow in GLX RenderLarge from unchecked dataBytes in the bundled xorg-x11-server source - CVE-2026-93519: fix heap buffer overflow from unbounded pointer barrier events in the bundled xorg-x11-server source - CVE-2026-93523: fix out-of-bounds heap write from unvalidated modifier values in ProcXIPassiveUngrabDevice in the bundled xorg-x11-server source - CVE-2026-88812: fix NULL text pointer after free in the XKB doodad error path in the bundled xorg-x11-server source - All carried by xorg-x11-server-source >= 1.20.4-99.el7_9.tuxcare.els17, no local patch; tigervnc-server-module now requires xorg-x11-server-Xorg >= 1.20.4-99.el7_9.tuxcare.els17 (XKB struct layout) - Built against xorg-x11-server-source 1.20.4-99.el7_9.tuxcare.els19, which also carries the CVE-2026-93521 and CVE-2026-93516 fixes into Xvnc
CVEs fixed:
Updated packages:
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:b8511322fb4a90a648da1e4cc51c09b9e23659a7c887bc1981d7d24c36e030c9
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:e59aa0cd3cb2a75dab1d1677a18b59d58620379a010a09dd355d8c06914f231e
  • tigervnc-icons-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:7e18c016b3bc7ed51c74d014de620d777ffb564bb51c1e40a0eb93765f3fb3c1
  • tigervnc-license-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:d64b02c5726a731d2d36e4d55001f5099f966fa24de757a90bf353831a00dd92
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:a0b73be78242e4e33fe0be60bb3bbf4eab43c16a44ee322925494674b2d8c3f0
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:e1f769df861bd843d96f9d319a2c37b4ae6d97ede5e7f3e6da538b5c49985c69
  • tigervnc-server-applet-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:af6262aa27bdafa04c4236906c063c5a44120e0eeca232157435e97466709193
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:515435e238ff3409cf9c22a3eb5f29325f88e87f14f02ff9eb4dc6168d08e8a8
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:274ed85d758e1a451ac7dd83e50584e24d6a7ea609aa60b662c85ef1518cb5ac
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:86bfc71c5c2605a2f913a65995870e3caab74199175237544d68f1f58f84b022
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:48b74d56871bb7b27e4aa800d8d00f2dd93760ce8ef89a2a5e75484c0bc1d395
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.