RHSA-2026:49519: Important: tigervnc security update
Important: tigervnc security update
Other sources
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.Security Fix(es): xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/tigervncto a version that resolves this vulnerability.Fixed in 1.1.0-25.el6_10.18 - Upgrade
Upgrade
redhat/tigervnc-debuginfoto a version that resolves this vulnerability.Fixed in 1.1.0-25.el6_10.18 - Upgrade
Upgrade
redhat/tigervnc-serverto a version that resolves this vulnerability.Fixed in 1.1.0-25.el6_10.18 - Upgrade
Upgrade
redhat/tigervnc-server-appletto a version that resolves this vulnerability.Fixed in 1.1.0-25.el6_10.18 - Upgrade
Upgrade
redhat/tigervnc-server-moduleto a version that resolves this vulnerability.Fixed in 1.1.0-25.el6_10.18 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50262 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50259 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50258 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50260 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50261 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50257 - Upgrade
Upgrade
xorg-x11-server/xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-50263 - Upgrade
Upgrade
TigerVNC (xorg-x11-server/xorg-x11-server-Xwayland via libXfont2)to a version that resolves this vulnerability.Patch CVE-2026-50256
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49519?
The severity of RHSA-2026:49519 is rated as high, with a score of 7.
What does RHSA-2026:49519 address?
RHSA-2026:49519 addresses security vulnerabilities in the tigervnc package.
How do I fix RHSA-2026:49519?
To fix RHSA-2026:49519, you should update the tigervnc package to its latest version as recommended by Red Hat.
Is RHSA-2026:49519 applicable to all Red Hat versions?
RHSA-2026:49519 is specifically applicable to Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension.
What is the risk level associated with RHSA-2026:49519?
The risk level associated with RHSA-2026:49519 is classified as 33.