Oracle alert ELSA-2025-2502 (tigervnc)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2025-2502 Important: Oracle Linux 8 tigervnc security update | |
| Date: | Tue, 11 Mar 2025 12:53:15 -0700 | |
| Message-ID: | <mailman.77.1741722808.33.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2025-2502 http://linux.oracle.com/errata/ELSA-2025-2502.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: tigervnc-1.13.1-15.el8_10.x86_64.rpm tigervnc-icons-1.13.1-15.el8_10.noarch.rpm tigervnc-license-1.13.1-15.el8_10.noarch.rpm tigervnc-selinux-1.13.1-15.el8_10.noarch.rpm tigervnc-server-1.13.1-15.el8_10.x86_64.rpm tigervnc-server-minimal-1.13.1-15.el8_10.x86_64.rpm tigervnc-server-module-1.13.1-15.el8_10.x86_64.rpm aarch64: tigervnc-1.13.1-15.el8_10.aarch64.rpm tigervnc-icons-1.13.1-15.el8_10.noarch.rpm tigervnc-license-1.13.1-15.el8_10.noarch.rpm tigervnc-selinux-1.13.1-15.el8_10.noarch.rpm tigervnc-server-1.13.1-15.el8_10.aarch64.rpm tigervnc-server-minimal-1.13.1-15.el8_10.aarch64.rpm tigervnc-server-module-1.13.1-15.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//tigervnc-1.13.1-... Related CVEs: CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601 Description of changes: [1.13.1-15] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79397 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-79401 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-79386 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-79380 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-79369 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-79364 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-79360 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-79348 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata