ELSA-2025-9306

ELSA-2025-9306 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-06-23

Description

[1.14.1-8]
- Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
Resolves: RHEL-97305

[1.14.1-7]
- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
Resolves: RHEL-97287
- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
Resolves: RHEL-97305
- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
Resolves: RHEL-97380
- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
Resolves: RHEL-97415
- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
Resolves: RHEL-97430

[1.14.1-6]
- Fix broken authentication with x0vncserver
Resolves: RHEL-93726

Related CVEs

CVE-2025-49180

CVE-2025-49175

CVE-2025-49179

CVE-2025-49178

CVE-2025-49176

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.14.1-8.el9_6.src.rpm	199cdf37bff3b3cd8e6bd37a1dc625d2f7465c74bb3f94a967b3d1a906395809	-	ol9_aarch64_appstream
	tigervnc-1.14.1-8.el9_6.aarch64.rpm	2c230bf93366c745502d7e6657f8cc88dd742a1bd6f8d43d2278bce940c6a896	-	ol9_aarch64_appstream
	tigervnc-icons-1.14.1-8.el9_6.noarch.rpm	15720deaa5be87433e03e2e5fafa637bda927f3283b153c7f2b22c9aad9dcf8c	-	ol9_aarch64_appstream
	tigervnc-license-1.14.1-8.el9_6.noarch.rpm	461d3193efd88e0cff1b237d7237ef350c3944eff5f5527587060f4b368d9475	-	ol9_aarch64_appstream
	tigervnc-selinux-1.14.1-8.el9_6.noarch.rpm	2be2a8f9823c047027a44d135cea749c0431698bb55188465d47d3dd42b34cd5	-	ol9_aarch64_appstream
	tigervnc-server-1.14.1-8.el9_6.aarch64.rpm	0e65698825d49d7a951abdad9454fcb3d2d8deccb4c4482cc1d78adcbce8ae8b	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.14.1-8.el9_6.aarch64.rpm	ef0a96e5d3d5b2617acde36cd70a38e24d49cf1dd9021ca2361ec04d3779d27b	-	ol9_aarch64_appstream
	tigervnc-server-module-1.14.1-8.el9_6.aarch64.rpm	4a7e7124400407f4ceb5aa79708181a02f52bbd6c6905383624c34a0c3843b0d	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.14.1-8.el9_6.src.rpm	199cdf37bff3b3cd8e6bd37a1dc625d2f7465c74bb3f94a967b3d1a906395809	-	ol9_x86_64_appstream
	tigervnc-1.14.1-8.el9_6.x86_64.rpm	ecef952cb3492c8c5a523e346ace45e2a49f1efbf560d79730c72db43ca94ee8	-	ol9_x86_64_appstream
	tigervnc-icons-1.14.1-8.el9_6.noarch.rpm	15720deaa5be87433e03e2e5fafa637bda927f3283b153c7f2b22c9aad9dcf8c	-	ol9_x86_64_appstream
	tigervnc-license-1.14.1-8.el9_6.noarch.rpm	461d3193efd88e0cff1b237d7237ef350c3944eff5f5527587060f4b368d9475	-	ol9_x86_64_appstream
	tigervnc-selinux-1.14.1-8.el9_6.noarch.rpm	2be2a8f9823c047027a44d135cea749c0431698bb55188465d47d3dd42b34cd5	-	ol9_x86_64_appstream
	tigervnc-server-1.14.1-8.el9_6.x86_64.rpm	80dd4d78545d2c6c98cee79ee2b51cc58e54512fbb25d25b2aa9523534f2fc71	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.14.1-8.el9_6.x86_64.rpm	f7996306720fb49ca35db4590cd7a2ee5de462db9e0b2ea1b1fafeb893aea786	-	ol9_x86_64_appstream
	tigervnc-server-module-1.14.1-8.el9_6.x86_64.rpm	e74c53011414f90d8a3c8b3045d98eac1ed7f5d15b6b6670aa018eb3a46084b5	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team