{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried\n by xorg-x11-server-source >= 1.20.4-99.el7_9.tuxcare.els14, no local patch", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/advisories/2026/clsa-2026_1792167432.json" } ], "tracking": { "current_release_date": "2026-10-24T03:51:16Z", "generator": { "date": "2026-10-24T03:51:16Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792167432", "initial_release_date": "2026-10-16T16:17:13Z", "revision_history": [ { "date": "2026-10-16T16:17:13Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-20T22:12:49Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-10-24T03:51:16Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "tigervnc: Fix of 28 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product": { "name": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_id": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server-minimal@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product": { "name": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_id": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product": { "name": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_id": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server-module@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product": { "name": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_id": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product": { "name": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_id": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server-minimal@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product": { "name": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_id": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product": { "name": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_id": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server-module@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product": { "name": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_id": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product": { "name": "tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product_id": "tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-icons@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=noarch" } } }, { "category": "product_version", "name": "tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product": { "name": "tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product_id": "tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-license@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=noarch" } } }, { "category": "product_version", "name": "tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product": { "name": "tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product_id": "tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/tigervnc-server-applet@1.8.0-33.0.11.el7_9.tuxcare.els3?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" }, "product_reference": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686" }, "product_reference": "tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch" }, "product_reference": "tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" }, "product_reference": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686" }, "product_reference": "tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch" }, "product_reference": "tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686" }, "product_reference": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" }, "product_reference": "tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch" }, "product_reference": "tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" }, "product_reference": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686" }, "product_reference": "tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-26599", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26599" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26599", "url": "https://access.redhat.com/security/cve/CVE-2025-26599" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345253" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34352", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34352" }, { "category": "external", "summary": "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393", "url": "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393" }, { "category": "external", "summary": "https://github.com/TigerVNC/tigervnc/issues/2079", "url": "https://github.com/TigerVNC/tigervnc/issues/2079" }, { "category": "external", "summary": "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI", "url": "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI" }, { "category": "external", "summary": "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2", "url": "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2026/03/26/7", "url": "https://www.openwall.com/lists/oss-security/2026/03/26/7" } ], "release_date": "2026-03-26T23:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2024-21885", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21885" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0320", "url": "https://access.redhat.com/errata/RHSA-2024:0320" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0557", "url": "https://access.redhat.com/errata/RHSA-2024:0557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0558", "url": "https://access.redhat.com/errata/RHSA-2024:0558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0597", "url": "https://access.redhat.com/errata/RHSA-2024:0597" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0607", "url": "https://access.redhat.com/errata/RHSA-2024:0607" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0614", "url": "https://access.redhat.com/errata/RHSA-2024:0614" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0617", "url": "https://access.redhat.com/errata/RHSA-2024:0617" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0621", "url": "https://access.redhat.com/errata/RHSA-2024:0621" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0626", "url": "https://access.redhat.com/errata/RHSA-2024:0626" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0629", "url": "https://access.redhat.com/errata/RHSA-2024:0629" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2169", "url": "https://access.redhat.com/errata/RHSA-2024:2169" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2170", "url": "https://access.redhat.com/errata/RHSA-2024:2170" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2995", "url": "https://access.redhat.com/errata/RHSA-2024:2995" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2996", "url": "https://access.redhat.com/errata/RHSA-2024:2996" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-21885", "url": "https://access.redhat.com/security/cve/CVE-2024-21885" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240503-0004/", "url": "https://security.netapp.com/advisory/ntap-20240503-0004/" } ], "release_date": "2024-02-28T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-6816", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6816" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0320", "url": "https://access.redhat.com/errata/RHSA-2024:0320" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0557", "url": "https://access.redhat.com/errata/RHSA-2024:0557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0558", "url": "https://access.redhat.com/errata/RHSA-2024:0558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0597", "url": "https://access.redhat.com/errata/RHSA-2024:0597" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0607", "url": "https://access.redhat.com/errata/RHSA-2024:0607" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0614", "url": "https://access.redhat.com/errata/RHSA-2024:0614" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0617", "url": "https://access.redhat.com/errata/RHSA-2024:0617" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0621", "url": "https://access.redhat.com/errata/RHSA-2024:0621" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0626", "url": "https://access.redhat.com/errata/RHSA-2024:0626" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0629", "url": "https://access.redhat.com/errata/RHSA-2024:0629" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2169", "url": "https://access.redhat.com/errata/RHSA-2024:2169" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2170", "url": "https://access.redhat.com/errata/RHSA-2024:2170" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2995", "url": "https://access.redhat.com/errata/RHSA-2024:2995" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2996", "url": "https://access.redhat.com/errata/RHSA-2024:2996" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-6816", "url": "https://access.redhat.com/security/cve/CVE-2023-6816" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2257691", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257691" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/01/18/1", "url": "http://www.openwall.com/lists/oss-security/2024/01/18/1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202401-30", "url": "https://security.gentoo.org/glsa/202401-30" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240307-0006/", "url": "https://security.netapp.com/advisory/ntap-20240307-0006/" } ], "release_date": "2024-01-18T05:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-26601", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26601" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26601", "url": "https://access.redhat.com/security/cve/CVE-2025-26601" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345251", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345251" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250516-0004/", "url": "https://security.netapp.com/advisory/ntap-20250516-0004/" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50264", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50264" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50264", "url": "https://access.redhat.com/security/cve/CVE-2026-50264" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485389", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485389" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50264.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50264.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-62229", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-62229" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19432", "url": "https://access.redhat.com/errata/RHSA-2025:19432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19433", "url": "https://access.redhat.com/errata/RHSA-2025:19433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19434", "url": "https://access.redhat.com/errata/RHSA-2025:19434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19435", "url": "https://access.redhat.com/errata/RHSA-2025:19435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19489", "url": "https://access.redhat.com/errata/RHSA-2025:19489" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19623", "url": "https://access.redhat.com/errata/RHSA-2025:19623" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19909", "url": "https://access.redhat.com/errata/RHSA-2025:19909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20958", "url": "https://access.redhat.com/errata/RHSA-2025:20958" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20960", "url": "https://access.redhat.com/errata/RHSA-2025:20960" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20961", "url": "https://access.redhat.com/errata/RHSA-2025:20961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21035", "url": "https://access.redhat.com/errata/RHSA-2025:21035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22040", "url": "https://access.redhat.com/errata/RHSA-2025:22040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22041", "url": "https://access.redhat.com/errata/RHSA-2025:22041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22051", "url": "https://access.redhat.com/errata/RHSA-2025:22051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22055", "url": "https://access.redhat.com/errata/RHSA-2025:22055" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22056", "url": "https://access.redhat.com/errata/RHSA-2025:22056" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22077", "url": "https://access.redhat.com/errata/RHSA-2025:22077" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22096", "url": "https://access.redhat.com/errata/RHSA-2025:22096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22164", "url": "https://access.redhat.com/errata/RHSA-2025:22164" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22167", "url": "https://access.redhat.com/errata/RHSA-2025:22167" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22364", "url": "https://access.redhat.com/errata/RHSA-2025:22364" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22365", "url": "https://access.redhat.com/errata/RHSA-2025:22365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22426", "url": "https://access.redhat.com/errata/RHSA-2025:22426" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22427", "url": "https://access.redhat.com/errata/RHSA-2025:22427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22667", "url": "https://access.redhat.com/errata/RHSA-2025:22667" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22729", "url": "https://access.redhat.com/errata/RHSA-2025:22729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22742", "url": "https://access.redhat.com/errata/RHSA-2025:22742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22753", "url": "https://access.redhat.com/errata/RHSA-2025:22753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0031", "url": "https://access.redhat.com/errata/RHSA-2026:0031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0033", "url": "https://access.redhat.com/errata/RHSA-2026:0033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0034", "url": "https://access.redhat.com/errata/RHSA-2026:0034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0035", "url": "https://access.redhat.com/errata/RHSA-2026:0035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0036", "url": "https://access.redhat.com/errata/RHSA-2026:0036" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-62229", "url": "https://access.redhat.com/security/cve/CVE-2025-62229" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2402649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402649" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html", "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/28/7", "url": "http://www.openwall.com/lists/oss-security/2025/10/28/7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html" } ], "release_date": "2025-10-30T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-0229", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0229" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0320", "url": "https://access.redhat.com/errata/RHSA-2024:0320" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0557", "url": "https://access.redhat.com/errata/RHSA-2024:0557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0558", "url": "https://access.redhat.com/errata/RHSA-2024:0558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0597", "url": "https://access.redhat.com/errata/RHSA-2024:0597" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0607", "url": "https://access.redhat.com/errata/RHSA-2024:0607" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0614", "url": "https://access.redhat.com/errata/RHSA-2024:0614" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0617", "url": "https://access.redhat.com/errata/RHSA-2024:0617" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0621", "url": "https://access.redhat.com/errata/RHSA-2024:0621" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0626", "url": "https://access.redhat.com/errata/RHSA-2024:0626" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0629", "url": "https://access.redhat.com/errata/RHSA-2024:0629" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2169", "url": "https://access.redhat.com/errata/RHSA-2024:2169" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2170", "url": "https://access.redhat.com/errata/RHSA-2024:2170" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2995", "url": "https://access.redhat.com/errata/RHSA-2024:2995" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2996", "url": "https://access.redhat.com/errata/RHSA-2024:2996" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-0229", "url": "https://access.redhat.com/security/cve/CVE-2024-0229" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256690", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256690" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/" } ], "release_date": "2024-02-09T07:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50256", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias target name length is 1024 bytes. A font alias name between 257 and 1023 bytes causes the X server to copy that name into the undersized stack buffer without further checks. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50256" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50256", "url": "https://access.redhat.com/security/cve/CVE-2026-50256" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485380", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485380" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50256.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50256.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34001", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34001" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10739", "url": "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11352", "url": "https://access.redhat.com/errata/RHSA-2026:11352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11369", "url": "https://access.redhat.com/errata/RHSA-2026:11369" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11388", "url": "https://access.redhat.com/errata/RHSA-2026:11388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11656", "url": "https://access.redhat.com/errata/RHSA-2026:11656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11692", "url": "https://access.redhat.com/errata/RHSA-2026:11692" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13414", "url": "https://access.redhat.com/errata/RHSA-2026:13414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19125", "url": "https://access.redhat.com/errata/RHSA-2026:19125" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19343", "url": "https://access.redhat.com/errata/RHSA-2026:19343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19344", "url": "https://access.redhat.com/errata/RHSA-2026:19344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34001", "url": "https://access.redhat.com/security/cve/CVE-2026-34001" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json" } ], "release_date": "2026-04-23T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26597", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26597" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26597", "url": "https://access.redhat.com/security/cve/CVE-2025-26597" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345255", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345255" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/06/02/1", "url": "http://www.openwall.com/lists/oss-security/2026/06/02/1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34000", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34000" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34000", "url": "https://access.redhat.com/security/cve/CVE-2026-34000" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451107" } ], "release_date": "2026-05-05T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50260", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50260" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50260", "url": "https://access.redhat.com/security/cve/CVE-2026-50260" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485385", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485385" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50260.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50260.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-33999", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-33999" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10739", "url": "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11352", "url": "https://access.redhat.com/errata/RHSA-2026:11352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11369", "url": "https://access.redhat.com/errata/RHSA-2026:11369" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11388", "url": "https://access.redhat.com/errata/RHSA-2026:11388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11656", "url": "https://access.redhat.com/errata/RHSA-2026:11656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11692", "url": "https://access.redhat.com/errata/RHSA-2026:11692" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13414", "url": "https://access.redhat.com/errata/RHSA-2026:13414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19125", "url": "https://access.redhat.com/errata/RHSA-2026:19125" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19343", "url": "https://access.redhat.com/errata/RHSA-2026:19343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19344", "url": "https://access.redhat.com/errata/RHSA-2026:19344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33999", "url": "https://access.redhat.com/security/cve/CVE-2026-33999" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json" } ], "release_date": "2026-04-23T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-49180", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-49180" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10258", "url": "https://access.redhat.com/errata/RHSA-2025:10258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10342", "url": "https://access.redhat.com/errata/RHSA-2025:10342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10343", "url": "https://access.redhat.com/errata/RHSA-2025:10343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10344", "url": "https://access.redhat.com/errata/RHSA-2025:10344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10346", "url": "https://access.redhat.com/errata/RHSA-2025:10346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10347", "url": "https://access.redhat.com/errata/RHSA-2025:10347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10348", "url": "https://access.redhat.com/errata/RHSA-2025:10348" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10349", "url": "https://access.redhat.com/errata/RHSA-2025:10349" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10350", "url": "https://access.redhat.com/errata/RHSA-2025:10350" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10351", "url": "https://access.redhat.com/errata/RHSA-2025:10351" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10352", "url": "https://access.redhat.com/errata/RHSA-2025:10352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10355", "url": "https://access.redhat.com/errata/RHSA-2025:10355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10356", "url": "https://access.redhat.com/errata/RHSA-2025:10356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10360", "url": "https://access.redhat.com/errata/RHSA-2025:10360" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10370", "url": "https://access.redhat.com/errata/RHSA-2025:10370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10374", "url": "https://access.redhat.com/errata/RHSA-2025:10374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10375", "url": "https://access.redhat.com/errata/RHSA-2025:10375" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10376", "url": "https://access.redhat.com/errata/RHSA-2025:10376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10377", "url": "https://access.redhat.com/errata/RHSA-2025:10377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10378", "url": "https://access.redhat.com/errata/RHSA-2025:10378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10381", "url": "https://access.redhat.com/errata/RHSA-2025:10381" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10410", "url": "https://access.redhat.com/errata/RHSA-2025:10410" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9303", "url": "https://access.redhat.com/errata/RHSA-2025:9303" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9304", "url": "https://access.redhat.com/errata/RHSA-2025:9304" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9305", "url": "https://access.redhat.com/errata/RHSA-2025:9305" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9306", "url": "https://access.redhat.com/errata/RHSA-2025:9306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9392", "url": "https://access.redhat.com/errata/RHSA-2025:9392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9964", "url": "https://access.redhat.com/errata/RHSA-2025:9964" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-49180", "url": "https://access.redhat.com/security/cve/CVE-2025-49180" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369981", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369981" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html" } ], "release_date": "2025-06-17T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26594", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26594" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26594", "url": "https://access.redhat.com/security/cve/CVE-2025-26594" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345248", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345248" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-49179", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-49179" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10258", "url": "https://access.redhat.com/errata/RHSA-2025:10258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10342", "url": "https://access.redhat.com/errata/RHSA-2025:10342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10343", "url": "https://access.redhat.com/errata/RHSA-2025:10343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10344", "url": "https://access.redhat.com/errata/RHSA-2025:10344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10346", "url": "https://access.redhat.com/errata/RHSA-2025:10346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10347", "url": "https://access.redhat.com/errata/RHSA-2025:10347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10348", "url": "https://access.redhat.com/errata/RHSA-2025:10348" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10349", "url": "https://access.redhat.com/errata/RHSA-2025:10349" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10350", "url": "https://access.redhat.com/errata/RHSA-2025:10350" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10351", "url": "https://access.redhat.com/errata/RHSA-2025:10351" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10352", "url": "https://access.redhat.com/errata/RHSA-2025:10352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10355", "url": "https://access.redhat.com/errata/RHSA-2025:10355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10356", "url": "https://access.redhat.com/errata/RHSA-2025:10356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10360", "url": "https://access.redhat.com/errata/RHSA-2025:10360" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10370", "url": "https://access.redhat.com/errata/RHSA-2025:10370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10374", "url": "https://access.redhat.com/errata/RHSA-2025:10374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10375", "url": "https://access.redhat.com/errata/RHSA-2025:10375" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10376", "url": "https://access.redhat.com/errata/RHSA-2025:10376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10377", "url": "https://access.redhat.com/errata/RHSA-2025:10377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10378", "url": "https://access.redhat.com/errata/RHSA-2025:10378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10381", "url": "https://access.redhat.com/errata/RHSA-2025:10381" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10410", "url": "https://access.redhat.com/errata/RHSA-2025:10410" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9303", "url": "https://access.redhat.com/errata/RHSA-2025:9303" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9304", "url": "https://access.redhat.com/errata/RHSA-2025:9304" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9305", "url": "https://access.redhat.com/errata/RHSA-2025:9305" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9306", "url": "https://access.redhat.com/errata/RHSA-2025:9306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9392", "url": "https://access.redhat.com/errata/RHSA-2025:9392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9964", "url": "https://access.redhat.com/errata/RHSA-2025:9964" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-49179", "url": "https://access.redhat.com/security/cve/CVE-2025-49179" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369978", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369978" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4" }, { "category": "external", "summary": "https://www.x.org/wiki/Development/Security/", "url": "https://www.x.org/wiki/Development/Security/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html" } ], "release_date": "2025-06-17T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26600", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26600" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26600", "url": "https://access.redhat.com/security/cve/CVE-2025-26600" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345252", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345252" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250516-0005/", "url": "https://security.netapp.com/advisory/ntap-20250516-0005/" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34002", "cwe": { "id": "CWE-805", "name": "Buffer Access with Incorrect Length Value" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34002" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34002", "url": "https://access.redhat.com/security/cve/CVE-2026-34002" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451112", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451112" } ], "release_date": "2026-05-05T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-26598", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26598" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26598", "url": "https://access.redhat.com/security/cve/CVE-2025-26598" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345254", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345254" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-31081", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-31081" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1785", "url": "https://access.redhat.com/errata/RHSA-2024:1785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2036", "url": "https://access.redhat.com/errata/RHSA-2024:2036" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2037", "url": "https://access.redhat.com/errata/RHSA-2024:2037" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2038", "url": "https://access.redhat.com/errata/RHSA-2024:2038" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2039", "url": "https://access.redhat.com/errata/RHSA-2024:2039" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2040", "url": "https://access.redhat.com/errata/RHSA-2024:2040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2041", "url": "https://access.redhat.com/errata/RHSA-2024:2041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2042", "url": "https://access.redhat.com/errata/RHSA-2024:2042" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2080", "url": "https://access.redhat.com/errata/RHSA-2024:2080" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2616", "url": "https://access.redhat.com/errata/RHSA-2024:2616" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3258", "url": "https://access.redhat.com/errata/RHSA-2024:3258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3261", "url": "https://access.redhat.com/errata/RHSA-2024:3261" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3343", "url": "https://access.redhat.com/errata/RHSA-2024:3343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9093", "url": "https://access.redhat.com/errata/RHSA-2024:9093" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9122", "url": "https://access.redhat.com/errata/RHSA-2024:9122" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-31081", "url": "https://access.redhat.com/security/cve/CVE-2024-31081" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2271998", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271998" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/03/13", "url": "http://www.openwall.com/lists/oss-security/2024/04/03/13" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/12/10", "url": "http://www.openwall.com/lists/oss-security/2024/04/12/10" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html", "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/" } ], "release_date": "2024-04-04T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50258", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive shift levels and trigger stack overflows. This is caused by an incomplete fix of CVE-2025-26597. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50258", "url": "https://access.redhat.com/security/cve/CVE-2026-50258" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485383", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485383" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50258.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50258.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50257", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to set up a fence and await that fence, then a second X connection destroys the fence, causing the use-after-free. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50257" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50257", "url": "https://access.redhat.com/security/cve/CVE-2026-50257" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485382", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485382" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50257.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50257.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26595", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26595" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26595", "url": "https://access.redhat.com/security/cve/CVE-2025-26595" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345257" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-21886", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21886" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0320", "url": "https://access.redhat.com/errata/RHSA-2024:0320" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0557", "url": "https://access.redhat.com/errata/RHSA-2024:0557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0558", "url": "https://access.redhat.com/errata/RHSA-2024:0558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0597", "url": "https://access.redhat.com/errata/RHSA-2024:0597" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0607", "url": "https://access.redhat.com/errata/RHSA-2024:0607" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0614", "url": "https://access.redhat.com/errata/RHSA-2024:0614" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0617", "url": "https://access.redhat.com/errata/RHSA-2024:0617" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0621", "url": "https://access.redhat.com/errata/RHSA-2024:0621" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0626", "url": "https://access.redhat.com/errata/RHSA-2024:0626" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0629", "url": "https://access.redhat.com/errata/RHSA-2024:0629" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2169", "url": "https://access.redhat.com/errata/RHSA-2024:2169" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2170", "url": "https://access.redhat.com/errata/RHSA-2024:2170" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2995", "url": "https://access.redhat.com/errata/RHSA-2024:2995" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2996", "url": "https://access.redhat.com/errata/RHSA-2024:2996" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-21886", "url": "https://access.redhat.com/security/cve/CVE-2024-21886" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZ2IJJDHJETNE76VUX4G7UI5EG5HYFEH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZ2IJJDHJETNE76VUX4G7UI5EG5HYFEH/" } ], "release_date": "2024-02-28T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-9632", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:10090", "url": "https://access.redhat.com/errata/RHSA-2024:10090" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:8798", "url": "https://access.redhat.com/errata/RHSA-2024:8798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9540", "url": "https://access.redhat.com/errata/RHSA-2024:9540" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9579", "url": "https://access.redhat.com/errata/RHSA-2024:9579" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9601", "url": "https://access.redhat.com/errata/RHSA-2024:9601" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9690", "url": "https://access.redhat.com/errata/RHSA-2024:9690" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9816", "url": "https://access.redhat.com/errata/RHSA-2024:9816" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9818", "url": "https://access.redhat.com/errata/RHSA-2024:9818" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9819", "url": "https://access.redhat.com/errata/RHSA-2024:9819" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9820", "url": "https://access.redhat.com/errata/RHSA-2024:9820" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9901", "url": "https://access.redhat.com/errata/RHSA-2024:9901" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-9632", "url": "https://access.redhat.com/security/cve/CVE-2024-9632" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2024/Oct/20", "url": "http://seclists.org/fulldisclosure/2024/Oct/20" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/10/29/2", "url": "http://www.openwall.com/lists/oss-security/2024/10/29/2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html", "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html" } ], "release_date": "2024-10-30T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26596", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26596" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26596", "url": "https://access.redhat.com/security/cve/CVE-2025-26596" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345256", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345256" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-62231", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-62231" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19432", "url": "https://access.redhat.com/errata/RHSA-2025:19432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19433", "url": "https://access.redhat.com/errata/RHSA-2025:19433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19434", "url": "https://access.redhat.com/errata/RHSA-2025:19434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19435", "url": "https://access.redhat.com/errata/RHSA-2025:19435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19489", "url": "https://access.redhat.com/errata/RHSA-2025:19489" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19623", "url": "https://access.redhat.com/errata/RHSA-2025:19623" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19909", "url": "https://access.redhat.com/errata/RHSA-2025:19909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20958", "url": "https://access.redhat.com/errata/RHSA-2025:20958" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20960", "url": "https://access.redhat.com/errata/RHSA-2025:20960" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20961", "url": "https://access.redhat.com/errata/RHSA-2025:20961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21035", "url": "https://access.redhat.com/errata/RHSA-2025:21035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22040", "url": "https://access.redhat.com/errata/RHSA-2025:22040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22041", "url": "https://access.redhat.com/errata/RHSA-2025:22041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22051", "url": "https://access.redhat.com/errata/RHSA-2025:22051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22055", "url": "https://access.redhat.com/errata/RHSA-2025:22055" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22056", "url": "https://access.redhat.com/errata/RHSA-2025:22056" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22077", "url": "https://access.redhat.com/errata/RHSA-2025:22077" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22096", "url": "https://access.redhat.com/errata/RHSA-2025:22096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22164", "url": "https://access.redhat.com/errata/RHSA-2025:22164" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22167", "url": "https://access.redhat.com/errata/RHSA-2025:22167" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22364", "url": "https://access.redhat.com/errata/RHSA-2025:22364" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22365", "url": "https://access.redhat.com/errata/RHSA-2025:22365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22426", "url": "https://access.redhat.com/errata/RHSA-2025:22426" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22427", "url": "https://access.redhat.com/errata/RHSA-2025:22427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22667", "url": "https://access.redhat.com/errata/RHSA-2025:22667" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22729", "url": "https://access.redhat.com/errata/RHSA-2025:22729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22742", "url": "https://access.redhat.com/errata/RHSA-2025:22742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22753", "url": "https://access.redhat.com/errata/RHSA-2025:22753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0031", "url": "https://access.redhat.com/errata/RHSA-2026:0031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0033", "url": "https://access.redhat.com/errata/RHSA-2026:0033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0034", "url": "https://access.redhat.com/errata/RHSA-2026:0034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0035", "url": "https://access.redhat.com/errata/RHSA-2026:0035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0036", "url": "https://access.redhat.com/errata/RHSA-2026:0036" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-62231", "url": "https://access.redhat.com/security/cve/CVE-2025-62231" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2402660", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402660" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html", "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/28/7", "url": "http://www.openwall.com/lists/oss-security/2025/10/28/7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html" } ], "release_date": "2025-10-30T05:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-31083", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-31083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1785", "url": "https://access.redhat.com/errata/RHSA-2024:1785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2036", "url": "https://access.redhat.com/errata/RHSA-2024:2036" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2037", "url": "https://access.redhat.com/errata/RHSA-2024:2037" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2038", "url": "https://access.redhat.com/errata/RHSA-2024:2038" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2039", "url": "https://access.redhat.com/errata/RHSA-2024:2039" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2040", "url": "https://access.redhat.com/errata/RHSA-2024:2040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2041", "url": "https://access.redhat.com/errata/RHSA-2024:2041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2042", "url": "https://access.redhat.com/errata/RHSA-2024:2042" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2080", "url": "https://access.redhat.com/errata/RHSA-2024:2080" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2616", "url": "https://access.redhat.com/errata/RHSA-2024:2616" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3258", "url": "https://access.redhat.com/errata/RHSA-2024:3258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3261", "url": "https://access.redhat.com/errata/RHSA-2024:3261" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3343", "url": "https://access.redhat.com/errata/RHSA-2024:3343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9093", "url": "https://access.redhat.com/errata/RHSA-2024:9093" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9122", "url": "https://access.redhat.com/errata/RHSA-2024:9122" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-31083", "url": "https://access.redhat.com/security/cve/CVE-2024-31083" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2272000", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272000" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/03/13", "url": "http://www.openwall.com/lists/oss-security/2024/04/03/13" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/12/10", "url": "http://www.openwall.com/lists/oss-security/2024/04/12/10" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html", "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/" } ], "release_date": "2024-04-05T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50261", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50261" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50261", "url": "https://access.redhat.com/security/cve/CVE-2026-50261" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485386" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50261.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50261.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34003", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34003" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10739", "url": "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11352", "url": "https://access.redhat.com/errata/RHSA-2026:11352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11369", "url": "https://access.redhat.com/errata/RHSA-2026:11369" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11388", "url": "https://access.redhat.com/errata/RHSA-2026:11388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11656", "url": "https://access.redhat.com/errata/RHSA-2026:11656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11692", "url": "https://access.redhat.com/errata/RHSA-2026:11692" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13414", "url": "https://access.redhat.com/errata/RHSA-2026:13414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19125", "url": "https://access.redhat.com/errata/RHSA-2026:19125" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19343", "url": "https://access.redhat.com/errata/RHSA-2026:19343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19344", "url": "https://access.redhat.com/errata/RHSA-2026:19344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34003", "url": "https://access.redhat.com/security/cve/CVE-2026-34003" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34003.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34003.json" } ], "release_date": "2026-04-23T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-31080", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-31080" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:1785", "url": "https://access.redhat.com/errata/RHSA-2024:1785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2036", "url": "https://access.redhat.com/errata/RHSA-2024:2036" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2037", "url": "https://access.redhat.com/errata/RHSA-2024:2037" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2038", "url": "https://access.redhat.com/errata/RHSA-2024:2038" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2039", "url": "https://access.redhat.com/errata/RHSA-2024:2039" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2040", "url": "https://access.redhat.com/errata/RHSA-2024:2040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2041", "url": "https://access.redhat.com/errata/RHSA-2024:2041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2042", "url": "https://access.redhat.com/errata/RHSA-2024:2042" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2080", "url": "https://access.redhat.com/errata/RHSA-2024:2080" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2616", "url": "https://access.redhat.com/errata/RHSA-2024:2616" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3258", "url": "https://access.redhat.com/errata/RHSA-2024:3258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3261", "url": "https://access.redhat.com/errata/RHSA-2024:3261" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:3343", "url": "https://access.redhat.com/errata/RHSA-2024:3343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9093", "url": "https://access.redhat.com/errata/RHSA-2024:9093" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9122", "url": "https://access.redhat.com/errata/RHSA-2024:9122" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-31080", "url": "https://access.redhat.com/security/cve/CVE-2024-31080" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2271997", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271997" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/03/13", "url": "http://www.openwall.com/lists/oss-security/2024/04/03/13" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/04/12/10", "url": "http://www.openwall.com/lists/oss-security/2024/04/12/10" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html", "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00009.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TF7FZXOKHIKPZXYIMSQXKVH7WITKV3V/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBLQJIAXEDMEGRGZMSH7CWUJHSVKUWLV/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P73U4DAAWLFZAPD75GLXTGMSTTQWW5AP/" } ], "release_date": "2024-04-04T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50259", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50259" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50259", "url": "https://access.redhat.com/security/cve/CVE-2026-50259" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485384" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50259.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50259.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-62230", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-62230" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19432", "url": "https://access.redhat.com/errata/RHSA-2025:19432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19433", "url": "https://access.redhat.com/errata/RHSA-2025:19433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19434", "url": "https://access.redhat.com/errata/RHSA-2025:19434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19435", "url": "https://access.redhat.com/errata/RHSA-2025:19435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19489", "url": "https://access.redhat.com/errata/RHSA-2025:19489" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19623", "url": "https://access.redhat.com/errata/RHSA-2025:19623" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19909", "url": "https://access.redhat.com/errata/RHSA-2025:19909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20958", "url": "https://access.redhat.com/errata/RHSA-2025:20958" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20960", "url": "https://access.redhat.com/errata/RHSA-2025:20960" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20961", "url": "https://access.redhat.com/errata/RHSA-2025:20961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21035", "url": "https://access.redhat.com/errata/RHSA-2025:21035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22040", "url": "https://access.redhat.com/errata/RHSA-2025:22040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22041", "url": "https://access.redhat.com/errata/RHSA-2025:22041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22051", "url": "https://access.redhat.com/errata/RHSA-2025:22051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22055", "url": "https://access.redhat.com/errata/RHSA-2025:22055" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22056", "url": "https://access.redhat.com/errata/RHSA-2025:22056" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22077", "url": "https://access.redhat.com/errata/RHSA-2025:22077" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22096", "url": "https://access.redhat.com/errata/RHSA-2025:22096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22164", "url": "https://access.redhat.com/errata/RHSA-2025:22164" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22167", "url": "https://access.redhat.com/errata/RHSA-2025:22167" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22364", "url": "https://access.redhat.com/errata/RHSA-2025:22364" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22365", "url": "https://access.redhat.com/errata/RHSA-2025:22365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22426", "url": "https://access.redhat.com/errata/RHSA-2025:22426" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22427", "url": "https://access.redhat.com/errata/RHSA-2025:22427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22667", "url": "https://access.redhat.com/errata/RHSA-2025:22667" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22729", "url": "https://access.redhat.com/errata/RHSA-2025:22729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22742", "url": "https://access.redhat.com/errata/RHSA-2025:22742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22753", "url": "https://access.redhat.com/errata/RHSA-2025:22753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0031", "url": "https://access.redhat.com/errata/RHSA-2026:0031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0033", "url": "https://access.redhat.com/errata/RHSA-2026:0033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0034", "url": "https://access.redhat.com/errata/RHSA-2026:0034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0035", "url": "https://access.redhat.com/errata/RHSA-2026:0035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0036", "url": "https://access.redhat.com/errata/RHSA-2026:0036" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-62230", "url": "https://access.redhat.com/security/cve/CVE-2025-62230" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2402653", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402653" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html", "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/28/7", "url": "http://www.openwall.com/lists/oss-security/2025/10/28/7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html" } ], "release_date": "2025-10-30T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-5367", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5367" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:6802", "url": "https://access.redhat.com/errata/RHSA-2023:6802" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:6808", "url": "https://access.redhat.com/errata/RHSA-2023:6808" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7373", "url": "https://access.redhat.com/errata/RHSA-2023:7373" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7388", "url": "https://access.redhat.com/errata/RHSA-2023:7388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7405", "url": "https://access.redhat.com/errata/RHSA-2023:7405" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7428", "url": "https://access.redhat.com/errata/RHSA-2023:7428" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7436", "url": "https://access.redhat.com/errata/RHSA-2023:7436" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7526", "url": "https://access.redhat.com/errata/RHSA-2023:7526" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2023:7533", "url": "https://access.redhat.com/errata/RHSA-2023:7533" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0010", "url": "https://access.redhat.com/errata/RHSA-2024:0010" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:0128", "url": "https://access.redhat.com/errata/RHSA-2024:0128" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2169", "url": "https://access.redhat.com/errata/RHSA-2024:2169" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2170", "url": "https://access.redhat.com/errata/RHSA-2024:2170" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2995", "url": "https://access.redhat.com/errata/RHSA-2024:2995" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:2996", "url": "https://access.redhat.com/errata/RHSA-2024:2996" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2023-5367", "url": "https://access.redhat.com/security/cve/CVE-2023-5367" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2243091", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243091" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2023-October/003430.html", "url": "https://lists.x.org/archives/xorg-announce/2023-October/003430.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00036.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YBK3I6SETHETBHDETFWM3VSZUQICIDV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YBK3I6SETHETBHDETFWM3VSZUQICIDV/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L2RMNR4235YXZZQ2X7Q4MTOZDMZ7BBQU/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L2RMNR4235YXZZQ2X7Q4MTOZDMZ7BBQU/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEDJN4VFN57K5POOC7BNVD6L6WUUCSG6/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEDJN4VFN57K5POOC7BNVD6L6WUUCSG6/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202401-30", "url": "https://security.gentoo.org/glsa/202401-30" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231130-0004/", "url": "https://security.netapp.com/advisory/ntap-20231130-0004/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5534", "url": "https://www.debian.org/security/2023/dsa-5534" } ], "release_date": "2023-10-25T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-49176", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-49176" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10258", "url": "https://access.redhat.com/errata/RHSA-2025:10258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10342", "url": "https://access.redhat.com/errata/RHSA-2025:10342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10343", "url": "https://access.redhat.com/errata/RHSA-2025:10343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10344", "url": "https://access.redhat.com/errata/RHSA-2025:10344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10346", "url": "https://access.redhat.com/errata/RHSA-2025:10346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10347", "url": "https://access.redhat.com/errata/RHSA-2025:10347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10348", "url": "https://access.redhat.com/errata/RHSA-2025:10348" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10349", "url": "https://access.redhat.com/errata/RHSA-2025:10349" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10350", "url": "https://access.redhat.com/errata/RHSA-2025:10350" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10351", "url": "https://access.redhat.com/errata/RHSA-2025:10351" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10352", "url": "https://access.redhat.com/errata/RHSA-2025:10352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10355", "url": "https://access.redhat.com/errata/RHSA-2025:10355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10356", "url": "https://access.redhat.com/errata/RHSA-2025:10356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10360", "url": "https://access.redhat.com/errata/RHSA-2025:10360" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10370", "url": "https://access.redhat.com/errata/RHSA-2025:10370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10374", "url": "https://access.redhat.com/errata/RHSA-2025:10374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10375", "url": "https://access.redhat.com/errata/RHSA-2025:10375" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10376", "url": "https://access.redhat.com/errata/RHSA-2025:10376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10377", "url": "https://access.redhat.com/errata/RHSA-2025:10377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10378", "url": "https://access.redhat.com/errata/RHSA-2025:10378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10381", "url": "https://access.redhat.com/errata/RHSA-2025:10381" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10410", "url": "https://access.redhat.com/errata/RHSA-2025:10410" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9303", "url": "https://access.redhat.com/errata/RHSA-2025:9303" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9304", "url": "https://access.redhat.com/errata/RHSA-2025:9304" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9305", "url": "https://access.redhat.com/errata/RHSA-2025:9305" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9306", "url": "https://access.redhat.com/errata/RHSA-2025:9306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9392", "url": "https://access.redhat.com/errata/RHSA-2025:9392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9964", "url": "https://access.redhat.com/errata/RHSA-2025:9964" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-49176", "url": "https://access.redhat.com/security/cve/CVE-2025-49176" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369954", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369954" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1" }, { "category": "external", "summary": "https://www.x.org/wiki/Development/Security/", "url": "https://www.x.org/wiki/Development/Security/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/06/18/2", "url": "http://www.openwall.com/lists/oss-security/2025/06/18/2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html" } ], "release_date": "2025-06-17T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T16:17:13.695299Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432", "product_ids": [ "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-icons-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-license-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-applet-0:1.8.0-33.0.11.el7_9.tuxcare.els3.noarch", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-minimal-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.i686", "CloudLinux-7:tigervnc-server-module-0:1.8.0-33.0.11.el7_9.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792167432" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }