CLSA-2026-1790608489

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790608489
Upstream
CVE (4)
Published
2026-10-16T00:00:34Z
Modified
2026-10-26T09:43:34Z
Summary
tigervnc: Fix of 2 CVEs
Details
  • CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes in the bundled xorg-x11-server source
  • CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow() in the bundled xorg-x11-server source
  • CVE-2026-55999: fix heap buffer overflow in glamor_font_get() in the bundled xorg-x11-server source
  • Dropped the local xorg-CVE-2026-50256/50257/50258/50259/50260/50261 patches and require xorg-x11-server-source >= 1.20.4-99.el7_9.tuxcare.els14 instead; those fixes are now carried by the xorg-x11-server source package, and applying them again here failed %prep
References

Affected packages

TuxCare:OracleLinux:7
tigervnc

Package

Name
tigervnc
Purl
pkg:rpm/tuxcare/tigervnc?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"
tigervnc-icons

Package

Name
tigervnc-icons
Purl
pkg:rpm/tuxcare/tigervnc-icons?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"
tigervnc-license

Package

Name
tigervnc-license
Purl
pkg:rpm/tuxcare/tigervnc-license?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"
tigervnc-server

Package

Name
tigervnc-server
Purl
pkg:rpm/tuxcare/tigervnc-server?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"
tigervnc-server-applet

Package

Name
tigervnc-server-applet
Purl
pkg:rpm/tuxcare/tigervnc-server-applet?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"
tigervnc-server-minimal

Package

Name
tigervnc-server-minimal
Purl
pkg:rpm/tuxcare/tigervnc-server-minimal?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"
tigervnc-server-module

Package

Name
tigervnc-server-module
Purl
pkg:rpm/tuxcare/tigervnc-server-module?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-33.0.11.el7_9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790608489.json"