Oracle alert ELSA-2025-2500 (tigervnc)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2025-2500 Important: Oracle Linux 9 tigervnc security update | |
| Date: | Tue, 11 Mar 2025 12:52:48 -0700 | |
| Message-ID: | <mailman.70.1741722776.33.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2025-2500 http://linux.oracle.com/errata/ELSA-2025-2500.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: tigervnc-1.14.1-1.el9_5.1.x86_64.rpm tigervnc-icons-1.14.1-1.el9_5.1.noarch.rpm tigervnc-license-1.14.1-1.el9_5.1.noarch.rpm tigervnc-selinux-1.14.1-1.el9_5.1.noarch.rpm tigervnc-server-1.14.1-1.el9_5.1.x86_64.rpm tigervnc-server-minimal-1.14.1-1.el9_5.1.x86_64.rpm tigervnc-server-module-1.14.1-1.el9_5.1.x86_64.rpm aarch64: tigervnc-1.14.1-1.el9_5.1.aarch64.rpm tigervnc-icons-1.14.1-1.el9_5.1.noarch.rpm tigervnc-license-1.14.1-1.el9_5.1.noarch.rpm tigervnc-selinux-1.14.1-1.el9_5.1.noarch.rpm tigervnc-server-1.14.1-1.el9_5.1.aarch64.rpm tigervnc-server-minimal-1.14.1-1.el9_5.1.aarch64.rpm tigervnc-server-module-1.14.1-1.el9_5.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//tigervnc-1.14.1-... Related CVEs: CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601 Description of changes: [1.14.1-1.1] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79406 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80018 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-79391 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80029 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-79374 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80043 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80037 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-79353 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata