[CLSA-2026:1794408771] tigervnc: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 14:53:02 UTC
Description:
- CVE-2026-93518: fix heap buffer overflow from 16-bit truncation of XKB syms/acts sizes in the bundled xorg-x11-server source - CVE-2026-93517: fix heap buffer overflow in GLX RenderLarge from unchecked dataBytes in the bundled xorg-x11-server source - CVE-2026-93519: fix heap buffer overflow from unbounded pointer barrier events in the bundled xorg-x11-server source - CVE-2026-93523: fix out-of-bounds heap write from unvalidated modifier values in ProcXIPassiveUngrabDevice in the bundled xorg-x11-server source - CVE-2026-88812: fix NULL text pointer after free in the XKB doodad error path in the bundled xorg-x11-server source - All carried by xorg-x11-server-source >= 1.20.4-99.el7_9.tuxcare.els17, no local patch; tigervnc-server-module now requires xorg-x11-server-Xorg >= 1.20.4-99.el7_9.tuxcare.els17 (XKB struct layout) - Built against xorg-x11-server-source 1.20.4-99.el7_9.tuxcare.els19, which also carries the CVE-2026-93521 and CVE-2026-93516 fixes into Xvnc
CVEs fixed:
Updated packages:
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.aarch64.rpm
    sha:15079304374f9268cf897fc75bf54f3b4c61e37ede5ee254971c9eeff6726046
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:0befa6eef2856670c87c98601fba29a7b73c0240fcc98fa2293c92ca77fb7911
  • tigervnc-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:9aed8da770d31751ac1a83db6388b1131b7830065b0e77de3f67276d84c9ec07
  • tigervnc-icons-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:84cd5cd974cd02a9fdd1b12e05213b12374752ce11b61e86ad3b4002db335a3f
  • tigervnc-license-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:1e913302333696260b4226e0f332f8f4bc644762f57c8b1e244662451bc53bf7
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.aarch64.rpm
    sha:5efff8d5c27282c7c3f47ebf1056a8f4f156519d8ac4385d134154737c985710
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:059d1d969ac78b34dab2e0955e2579319bb86eadd6f2c521e574d1109eb787f0
  • tigervnc-server-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:81b2bbdcc3a6299fd918b4995c6b99397ef5cac54a12925067e8f44a6ff361b7
  • tigervnc-server-applet-1.8.0-33.0.11.el7_9.tuxcare.els4.noarch.rpm
    sha:4b1a69520572c5429ae47bd69138da1057b3fe9d765405b6d67c454a5238c6d6
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.aarch64.rpm
    sha:c760d50fc9f5dc6588afdf00b789b2f5e5ae0f6c512bab89a8722e2333752018
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:bca672505ff871f2da85c48015867ca2c7cc0e25ae52c5da72f77bcdc847896f
  • tigervnc-server-minimal-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:51fb8a76fc5c1984b9005ee13b9028b926c7f14d6fd06d53d8a4b16fdf53b318
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.aarch64.rpm
    sha:332e91b886c91f7b60c07aba7670cd031cb0be7fd15aa03b36c4050ec07911b8
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.i686.rpm
    sha:f2d4078b698cc33374fdd555b2000b726cefeb569c782f3b72094d4a1d514698
  • tigervnc-server-module-1.8.0-33.0.11.el7_9.tuxcare.els4.x86_64.rpm
    sha:15c9b7c047cc39eea6469b8d327def1167f32b20ed577d8f284842860c3169a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.