Amazon Linux 2023 : tigervnc, tigervnc-icons, tigervnc-license (ALAS2023-2026-3262)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3262 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

CLSA-2026-1792819460 tigervnc: Fix of 3 CVEs

CVE-2026-93517: GLX RenderLarge copied client dataBytes into a buffer sized by the smaller embedded cmdlen, allowing a heap buffer overflow - CVE-2026-93518: XKB sizesyms/numsyms/sizeacts/numacts were 16-bit, so resize computations truncated and caused undersized allocations and heap overflow -...

Amazon Linux 2 : tigervnc (ALAS-2026-4013)

The version of tigervnc installed on the remote host is prior to 1.8.0-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4013 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues,...

MGASA-2026-0529 Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

CLSA-2026-1791120339 tigervnc: Fix of 2 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow in the bundled xorg-x11-server source - CVE-2026-55999: fix heap buffer overflow in...

CLSA-2026-1790608489 tigervnc: Fix of 2 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow in the bundled xorg-x11-server source - CVE-2026-55999: fix heap buffer overflow in...

Rocky Linux 8.6 [CIQ] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ciqsa-2026_1611)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261611 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.6. It addresses 21 CVEs: CVE-2017-7396, CVE-2025-49180, CVE-2025-26601,...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc (crlsa-2024_9540)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249540 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block directl...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc (crlsa-2024_8798)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248798 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block directl...

Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_9303)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259303 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland:...

Rocky Linux 9.4 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0582)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260582 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.4. It addresses 12 CVEs: CVE-2025-49180, CVE-2025-26601, CVE-2025-26594,...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2025_9392)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259392 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland:...

Rocky Linux 9 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc (crlsa-2024_10090)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202410090 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block direct...

Rocky Linux 9 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc (crlsa-2023_1592)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231592 advisory. xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability CVE-2023-1393 Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (crlsa-2026_13414)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613414 advisory. xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling CVE-2026-33999 xorg: xwayland: X.Org X server:...

Rocky Linux 9.2 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_1039)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261039 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.2. It addresses 7 CVEs: CVE-2023-6816, CVE-2024-0229, CVE-2024-21886,...

Rocky Linux 8.6 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0927)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260927 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.6. It addresses 19 CVEs: CVE-2022-46341, CVE-2023-6816, CVE-2024-0229,...

Rocky Linux 8.8 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0340)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260340 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.8. It addresses 12 CVEs: CVE-2023-6816, CVE-2024-0229, CVE-2024-31080,...

Rocky Linux 9.2 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0499)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260499 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 9.2. It addresses 28 CVEs: CVE-2022-46341, CVE-2017-7396, CVE-2025-49180,...