ELSA-2025-9392

ELSA-2025-9392 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-06-23

Description

[1.15.0-7]
- Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
Resolves: RHEL-97294

[1.15.0-6]
- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
Resolves: RHEL-97268
- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
Resolves: RHEL-97294
- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
Resolves: RHEL-97364
- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
Resolves: RHEL-97397
- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
Resolves: RHEL-97232

Related CVEs

CVE-2025-49180

CVE-2025-49175

CVE-2025-49178

CVE-2025-49179

CVE-2025-49176

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	tigervnc-1.15.0-7.el8_10.src.rpm	fd741cd7fcc1583eea8f42fbb29b2931d96e42de0e10b5868c696b3f99998c4d	-	ol8_aarch64_appstream
	tigervnc-1.15.0-7.el8_10.aarch64.rpm	de864473e4ce56ce6151b9b5e6991eadb765a5dcdddc552d8465f690558f11ea	-	ol8_aarch64_appstream
	tigervnc-icons-1.15.0-7.el8_10.noarch.rpm	08b00f8825c993afa8cd466204682db256d0debc5ae1528ec56a517918a929d8	-	ol8_aarch64_appstream
	tigervnc-license-1.15.0-7.el8_10.noarch.rpm	02c22e5d9043d18747eb7cea0a29cc57e5c793cd71a0c22c558856c91d7c2555	-	ol8_aarch64_appstream
	tigervnc-selinux-1.15.0-7.el8_10.noarch.rpm	c96c15f83e9ae1644fcf94b7ae60e8c3b19788f0049b2df3036854b65bf0c2cb	-	ol8_aarch64_appstream
	tigervnc-server-1.15.0-7.el8_10.aarch64.rpm	7625b7887742bd81e3071c855e61390cfb0d9c83bb0ec7e44bb7cc1b06c12285	-	ol8_aarch64_appstream
	tigervnc-server-minimal-1.15.0-7.el8_10.aarch64.rpm	148a90519d5269fe9f542f476bbfa9915d8c3a388272c85c90cb8dd202b21b1a	-	ol8_aarch64_appstream
	tigervnc-server-module-1.15.0-7.el8_10.aarch64.rpm	b4d9c3950c10ff125b7c5120bb06fbb1704865bb7569c533cc19142ac8c7dc89	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	tigervnc-1.15.0-7.el8_10.src.rpm	fd741cd7fcc1583eea8f42fbb29b2931d96e42de0e10b5868c696b3f99998c4d	-	ol8_x86_64_appstream
	tigervnc-1.15.0-7.el8_10.x86_64.rpm	860491b31e8f10495fcd4c1de5590694ab1a55184a7e2de570a872359ddcbfff	-	ol8_x86_64_appstream
	tigervnc-icons-1.15.0-7.el8_10.noarch.rpm	08b00f8825c993afa8cd466204682db256d0debc5ae1528ec56a517918a929d8	-	ol8_x86_64_appstream
	tigervnc-license-1.15.0-7.el8_10.noarch.rpm	02c22e5d9043d18747eb7cea0a29cc57e5c793cd71a0c22c558856c91d7c2555	-	ol8_x86_64_appstream
	tigervnc-selinux-1.15.0-7.el8_10.noarch.rpm	c96c15f83e9ae1644fcf94b7ae60e8c3b19788f0049b2df3036854b65bf0c2cb	-	ol8_x86_64_appstream
	tigervnc-server-1.15.0-7.el8_10.x86_64.rpm	55f7b3fc6e20a0fc457f42d06c2d012be076b4068c84e5686697eddeae6c5c24	-	ol8_x86_64_appstream
	tigervnc-server-minimal-1.15.0-7.el8_10.x86_64.rpm	457a7f609bef8e66d1a66d1a4d03ba3b17f75eff26dade9229b741f8c119ab8d	-	ol8_x86_64_appstream
	tigervnc-server-module-1.15.0-7.el8_10.x86_64.rpm	c96cb732b343976ba2f1886a153442f5f044af1ad9479a22dce99bf86365b566	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team