[ALSA-2026:99623] Important: tigervnc security update
Type:
security
Severity:
important
Release date:
2026-11-12
Description:
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 tigervnc-server-module-1.15.0-11.el8_10.aarch64.rpm 1eb65d8d76ce61a92ac49831f26ac2d0ad5890713ee712ea507b1c6e3a3f8fb1
aarch64 tigervnc-server-1.15.0-11.el8_10.aarch64.rpm 70a6509b925d3dd27f9556f25b9f5a98a2bc88409acc21c9b750dc4b0605d391
aarch64 tigervnc-server-minimal-1.15.0-11.el8_10.aarch64.rpm 82d10003b868b9e8eb516b9c0f6f3ee9587301efadf124564796a4d13ad076b3
aarch64 tigervnc-1.15.0-11.el8_10.aarch64.rpm 855c44934d726a66587a0ad43e6372190c38bdbe4ecbc5478f99bc0c3358d882
noarch tigervnc-icons-1.15.0-11.el8_10.noarch.rpm 0e54df6553d72e7fa26cd14b3692c019b1e753a1bda6c3b08f3cd7c1bc32130c
noarch tigervnc-selinux-1.15.0-11.el8_10.noarch.rpm 151adec6a27c3ccbfe6074111a8934f0151ea8ca23e403def5ef62a59cb5666f
noarch tigervnc-license-1.15.0-11.el8_10.noarch.rpm 6738c2b8b7d7d1570506a4eef2b0db10a6c0a20befe48e1396b51a8dbbd74249
ppc64le tigervnc-server-minimal-1.15.0-11.el8_10.ppc64le.rpm 3ffbde7a0bfd24fe9ec3d350766e3397b980b425b3b0bf6c997dc0cff8c53731
ppc64le tigervnc-1.15.0-11.el8_10.ppc64le.rpm 50a4b36a889ede1a7fa28670326680514946ca50b0bad06fd6eaaeeed7b70df8
ppc64le tigervnc-server-module-1.15.0-11.el8_10.ppc64le.rpm 7b80a9ffc24a07f857d976cf80c0213132eec7a8d528939865bbfda03e8d3dca
ppc64le tigervnc-server-1.15.0-11.el8_10.ppc64le.rpm e64e15fd7dc68b6c841512311d06fa3942553a5026226d50614e01c792509f0f
s390x tigervnc-1.15.0-11.el8_10.s390x.rpm 2e73d7d03154dd9a69bc3c1bc3ec2f1445f336c2d2169c380e7199978153ce4f
s390x tigervnc-server-module-1.15.0-11.el8_10.s390x.rpm 582fcc2cd87fd739b66ee7425a1236b52da85417b84eaf16c4140db83e2cccde
s390x tigervnc-server-1.15.0-11.el8_10.s390x.rpm 59e363fd9e63709c969ff23afcbb6e3410fbe610b1d075491e2d27e01f5086a0
s390x tigervnc-server-minimal-1.15.0-11.el8_10.s390x.rpm a13d9e3272fe35646f6d9b40b7492743aadbcf85ad489d31f20455c55bc7177e
x86_64 tigervnc-1.15.0-11.el8_10.x86_64.rpm 23d0b0c7695d5d7a85f94455ae706255091d2e6f9f116166baec83c2ab7fe278
x86_64 tigervnc-server-module-1.15.0-11.el8_10.x86_64.rpm 68874aeecca98a6411bd73ece638b4f97ff2a9fdc30c3aa4e6191dfb1f3a4705
x86_64 tigervnc-server-minimal-1.15.0-11.el8_10.x86_64.rpm e8e0173930819094a3865c6270617d1119e83171d015390c79a5df1dc13ec5c0
x86_64 tigervnc-server-1.15.0-11.el8_10.x86_64.rpm f9ae1ad28de361a544c95e3c307a3d00a2c37299541087651374f9bce140912c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.