ELSA-2025-20958

ELSA-2025-20958 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-11-25

Description

[1.15.0-6]
- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
Resolves: RHEL-119986

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
Resolves: RHEL-120007

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
Resolves: RHEL-120768

Related CVEs

CVE-2025-62229

CVE-2025-62230

CVE-2025-62231

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.15.0-6.el9_7.src.rpm	0531f840f718b976e2693afc9571479235687d8b998dddaae928d1d5d5236cf0	-	ol9_aarch64_appstream
	tigervnc-1.15.0-6.el9_7.aarch64.rpm	38fdb1c23b0db690d5e8ef41de5bca9530589353ceb7d1e337a7e69b49d739aa	-	ol9_aarch64_appstream
	tigervnc-icons-1.15.0-6.el9_7.noarch.rpm	8892c464ebf6b15eb97509e0dd0818310f38aa071b41a976fb1f8fe9075eb3eb	-	ol9_aarch64_appstream
	tigervnc-license-1.15.0-6.el9_7.noarch.rpm	6f5d1e6503dea53be796cb987a91ffaa069a3c4b3475458776ee9bece613152b	-	ol9_aarch64_appstream
	tigervnc-selinux-1.15.0-6.el9_7.noarch.rpm	b29f74b8e51b237c9a2e32f6c796e624df4427d5a330d69231e595ce21830d13	-	ol9_aarch64_appstream
	tigervnc-server-1.15.0-6.el9_7.aarch64.rpm	0986ce0b67b90c43745a0cc968abbd16fb797678b6ab553323b46afe32460bdd	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.15.0-6.el9_7.aarch64.rpm	cb26dfbb0cb6013607ba53b2005c9d2952f421c926f42df94ca2294ffee1f081	-	ol9_aarch64_appstream
	tigervnc-server-module-1.15.0-6.el9_7.aarch64.rpm	22013c4b9c67314344c39d452dbee8be8fe554157181801b03e02f91fe5fd6d5	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.15.0-6.el9_7.src.rpm	0531f840f718b976e2693afc9571479235687d8b998dddaae928d1d5d5236cf0	-	ol9_x86_64_appstream
	tigervnc-1.15.0-6.el9_7.x86_64.rpm	7354926095319c53cbbebccdd6fb7e11dabb34c3011485683365955fe71b3342	-	ol9_x86_64_appstream
	tigervnc-icons-1.15.0-6.el9_7.noarch.rpm	8892c464ebf6b15eb97509e0dd0818310f38aa071b41a976fb1f8fe9075eb3eb	-	ol9_x86_64_appstream
	tigervnc-license-1.15.0-6.el9_7.noarch.rpm	6f5d1e6503dea53be796cb987a91ffaa069a3c4b3475458776ee9bece613152b	-	ol9_x86_64_appstream
	tigervnc-selinux-1.15.0-6.el9_7.noarch.rpm	b29f74b8e51b237c9a2e32f6c796e624df4427d5a330d69231e595ce21830d13	-	ol9_x86_64_appstream
	tigervnc-server-1.15.0-6.el9_7.x86_64.rpm	f02b97f8caf8aa78bd75cb60886ba718b97c1b2251d696f30f429a9b44cf8d73	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.15.0-6.el9_7.x86_64.rpm	ba1aa1787d30c26b112a37d574901e637636ed24c91b1eddd9a8db1b576dbae4	-	ol9_x86_64_appstream
	tigervnc-server-module-1.15.0-6.el9_7.x86_64.rpm	bd748e078bf880cbab2905a14333c7bfb5bb5d2b743b8c80a42cf7bceee6ef04	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team