ELSA-2026-19342

ELSA-2026-19342 - tigervnc security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-23

Description

[1.15.0-7.1]
- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
Resolves: RHEL-163213
Resolves: RHEL-163281
Resolves: RHEL-163267
- Fix CVE-2026-34352
Resolves: RHEL-167986

[1.15.0-7]
- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
Resolves: RHEL-120770

Related CVEs

CVE-2026-33999

CVE-2026-34000

CVE-2026-34001

CVE-2026-34003

CVE-2026-34352

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	tigervnc-1.15.0-7.el9_8.1.src.rpm	097a408bfe4bc374ca520427be9736362799c4a8f14ea7176aeea4adc26341e2	-	ol9_aarch64_appstream
	tigervnc-1.15.0-7.el9_8.1.aarch64.rpm	a31ccd2ed8b3b9a346d6bfc6b96e86dc3f3a6021b1f0a5a0c3cc81cc93dced7f	-	ol9_aarch64_appstream
	tigervnc-icons-1.15.0-7.el9_8.1.noarch.rpm	4fe345648de8548b27ff281a1c788984b80d4e8e0e92b9d4f2da706ed7d13b8d	-	ol9_aarch64_appstream
	tigervnc-license-1.15.0-7.el9_8.1.noarch.rpm	f98bdfa3c30c44be242836ef5fc71ccb975def662f20cdcb414b932160608c09	-	ol9_aarch64_appstream
	tigervnc-selinux-1.15.0-7.el9_8.1.noarch.rpm	44c08cda9e17f3838bc71a8934b60e9da8323bd1753cc476a7da32fe6297b721	-	ol9_aarch64_appstream
	tigervnc-server-1.15.0-7.el9_8.1.aarch64.rpm	0ab9ac91c01adb32127279519d49dbc607d0c738a196d92bdb86fd860afe777e	-	ol9_aarch64_appstream
	tigervnc-server-minimal-1.15.0-7.el9_8.1.aarch64.rpm	6172f3baa3bd49c23129a481fc41dd6baa68d7c430638390034868adf9a717ca	-	ol9_aarch64_appstream
	tigervnc-server-module-1.15.0-7.el9_8.1.aarch64.rpm	91103e5a056dc3f142bff2028da6fd48fb0b3ec5058ea639a9da9882e2c83c81	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	tigervnc-1.15.0-7.el9_8.1.src.rpm	097a408bfe4bc374ca520427be9736362799c4a8f14ea7176aeea4adc26341e2	-	ol9_x86_64_appstream
	tigervnc-1.15.0-7.el9_8.1.x86_64.rpm	bda665dda79c0fefdb504746bfee6f46e3d542282527732a1e067ac3f793b59e	-	ol9_x86_64_appstream
	tigervnc-icons-1.15.0-7.el9_8.1.noarch.rpm	4fe345648de8548b27ff281a1c788984b80d4e8e0e92b9d4f2da706ed7d13b8d	-	ol9_x86_64_appstream
	tigervnc-license-1.15.0-7.el9_8.1.noarch.rpm	f98bdfa3c30c44be242836ef5fc71ccb975def662f20cdcb414b932160608c09	-	ol9_x86_64_appstream
	tigervnc-selinux-1.15.0-7.el9_8.1.noarch.rpm	44c08cda9e17f3838bc71a8934b60e9da8323bd1753cc476a7da32fe6297b721	-	ol9_x86_64_appstream
	tigervnc-server-1.15.0-7.el9_8.1.x86_64.rpm	96c13f2eb334ff6be500877812c471f8f15d0c03181afce6e29ecd59a756e56d	-	ol9_x86_64_appstream
	tigervnc-server-minimal-1.15.0-7.el9_8.1.x86_64.rpm	5c8615bbfa59d1d573a6ea6eb658b864a7b3f8df20e4485c52f2858b198c5bfc	-	ol9_x86_64_appstream
	tigervnc-server-module-1.15.0-7.el9_8.1.x86_64.rpm	2efe956e14613244574abba8ff30af013e77006b6aea8b8a0c942c8c4c2f7cb8	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team