Red Hat Security AdvisoryRHSA-2025:22041
tigervnc security update
Released 2025-11-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) tigervnc-1.12.0-6.el8_6.15, tigervnc-icons-1.12.0-6.el8_6.15, tigervnc-license-1.12.0-6.el8_6.15 +4
- Red Hat Enterprise Linux AppStream E4S (v.8.6) tigervnc-1.12.0-6.el8_6.15, tigervnc-icons-1.12.0-6.el8_6.15, tigervnc-license-1.12.0-6.el8_6.15 +4
- Red Hat Enterprise Linux AppStream TUS (v.8.6) tigervnc-1.12.0-6.el8_6.15, tigervnc-icons-1.12.0-6.el8_6.15, tigervnc-license-1.12.0-6.el8_6.15 +4
Fixes 3 records
Priority LOW 35
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00508 · Published 2025-10-30 · Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-416
Priority LOW 34
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2025-10-30 · Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-190
Priority LOW 34
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00282 · Published 2025-10-30 · Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-416