RLSA-2026:98538: Important: tigervnc security update
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)
xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)
xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)
xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)
xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)
xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)
xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in inputconstraincursor() (CVE-2026-93519)
xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/tigervncto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-debugsourceto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-serverto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-server-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-server-minimalto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-server-minimal-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-server-moduleto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-server-module-debuginfoto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-iconsto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-licenseto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1 - Upgrade
Upgrade
rocky-linux/tigervnc-selinuxto a version that resolves this vulnerability.Fixed in 0:1.16.2-4.el9_9.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What access does an attacker need to exploit the issues covered by this update?
The supplied severity vector indicates local access and low privileges are required. No user interaction is required.
What impact could successful exploitation have?
The supplied severity vector rates confidentiality, integrity, and availability impact as high. The listed fixes include arbitrary code execution, privilege escalation, buffer overflows, use-after-free, double-free, and out-of-bounds write issues.
Which TigerVNC-related packages are included in this advisory?
The advisory lists tigervnc, tigervnc-debuginfo, tigervnc-debugsource, tigervnc-server, tigervnc-server-debuginfo, tigervnc-server-minimal, tigervnc-server-minimal-debuginfo, and tigervnc-server-module for Rocky Linux.