Amazon Linux 2023 : tigervnc, tigervnc-icons, tigervnc-license (ALAS2023-2026-3262)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3262 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

CLSA-2026-1792819460 tigervnc: Fix of 3 CVEs

CVE-2026-93517: GLX RenderLarge copied client dataBytes into a buffer sized by the smaller embedded cmdlen, allowing a heap buffer overflow - CVE-2026-93518: XKB sizesyms/numsyms/sizeacts/numacts were 16-bit, so resize computations truncated and caused undersized allocations and heap overflow -...

Amazon Linux 2 : tigervnc (ALAS-2026-4013)

The version of tigervnc installed on the remote host is prior to 1.8.0-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4013 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues,...

MGASA-2026-0529 Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

CLSA-2026-1792165466 tigervnc: Fix of CVE-2026-50264

CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried by xorg-x11-server-source = 1.20.4-99.el79.tuxcare.els14, no local patch...

CLSA-2026-1792177938 tigervnc: Fix of 27 CVEs

CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried by xorg-x11-server-source = 1.20.4-99.el79.tuxcare.els14, no local patch...

CLSA-2026-1792165353 tigervnc: Fix of CVE-2026-50264

CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried by xorg-x11-server-source = 1.20.4-99.el79.tuxcare.els14, no local patch...

CLSA-2026-1791120339 tigervnc: Fix of 2 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow in the bundled xorg-x11-server source - CVE-2026-55999: fix heap buffer overflow in...

CLSA-2026-1790608489 tigervnc: Fix of 2 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow in the bundled xorg-x11-server source - CVE-2026-55999: fix heap buffer overflow in...

CentOS Linux 7 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-server / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791120339)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791120339 advisory. - An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation...

Rocky Linux 8.6 [CIQ] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ciqsa-2026_1611)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261611 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.6. It addresses 21 CVEs: CVE-2017-7396, CVE-2025-49180, CVE-2025-26601,...

Rocky Linux 10.0 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_9304)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259304 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwaylan...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_9305)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259305 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland:...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2025_9392)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259392 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland:...

Rocky Linux 9.2 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0499)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260499 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.2. It addresses 28 CVEs: CVE-2022-46341, CVE-2017-7396, CVE-2025-49180,...

Rocky Linux 9.4 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0582)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260582 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.4. It addresses 12 CVEs: CVE-2025-49180, CVE-2025-26601, CVE-2025-26594,...

Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_9303)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259303 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland:...

Rocky Linux 9 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2025_9306)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259306 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland:...

Rocky Linux 9.2 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_1103)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261103 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083. Tenabl...