{"id":"CLSA-2026-1792819460","summary":"tigervnc: Fix of 3 CVEs","details":"- CVE-2026-93517: GLX RenderLarge copied client dataBytes into a buffer\n  sized by the smaller embedded cmdlen, allowing a heap buffer overflow\n- CVE-2026-93518: XKB size_syms/num_syms/size_acts/num_acts were 16-bit,\n  so resize computations truncated and caused undersized allocations and\n  heap overflow\n- CVE-2026-93519: Crossing many pointer barriers at once wrote barrier\n  events past the end of the fixed-size input event buffer (heap\n  overflow)","modified":"2026-10-26T09:31:37.104058738Z","published":"2026-10-24T05:24:31Z","upstream":["CVE-2026-93517","CVE-2026-93518","CVE-2026-93519"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792819460.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93517"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93518"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93519"}],"affected":[{"package":{"name":"tigervnc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}},{"package":{"name":"tigervnc-icons","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc-icons?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}},{"package":{"name":"tigervnc-license","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc-license?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}},{"package":{"name":"tigervnc-selinux","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc-selinux?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}},{"package":{"name":"tigervnc-server","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc-server?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}},{"package":{"name":"tigervnc-server-minimal","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc-server-minimal?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}},{"package":{"name":"tigervnc-server-module","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/tigervnc-server-module?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1792819460.json"}}],"schema_version":"1.9.0"}