{
  "document": {
    "aggregate_severity": {
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      },
      {
        "category": "details",
        "text": "CVE-2026-93517: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5\n  (GLX RenderLarge heap buffer overflow)\n- CVE-2026-93518: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5\n  (XKB ResizeKeyType numeric truncation)\n- CVE-2026-93519: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5\n  (XFixes pointer barrier event list buffer overflow)\n- Exclude i686: the buildroot has no pkgconfig(xkbcomp) and AlmaLinux 9\n  does not ship tigervnc.i686",
        "title": "Details"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059",
        "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1792781059.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-23T18:47:01Z",
      "generator": {
        "date": "2026-10-23T18:47:01Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CLSA-2026:1792781059",
      "initial_release_date": "2026-10-23T18:47:01Z",
      "revision_history": [
        {
          "date": "2026-10-23T18:47:01Z",
          "number": "1",
          "summary": "Initial version"
        }
      ],
      "status": "final",
      "version": "1"
    },
    "title": "tigervnc: Fix of 3 CVEs"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "AlmaLinux 9.8",
                "product": {
                  "name": "AlmaLinux 9.8",
                  "product_id": "AlmaLinux-9.8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "AlmaLinux"
          }
        ],
        "category": "vendor",
        "name": "AlmaLinux OS Foundation"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Rocky Linux 9.8",
                "product": {
                  "name": "Rocky Linux 9.8",
                  "product_id": "Rocky Linux-9.8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Rocky Linux"
          }
        ],
        "category": "vendor",
        "name": "Rocky Linux"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                "product": {
                  "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_id": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-server-module@1.15.0-7.el9_8.2.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                "product": {
                  "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_id": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-server@1.15.0-7.el9_8.2.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_id": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-server-minimal@1.15.0-7.el9_8.2.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                "product": {
                  "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_id": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc@1.15.0-7.el9_8.2.tuxcare.els1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                "product": {
                  "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_id": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-server-module@1.15.0-7.el9_8.2.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                "product": {
                  "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_id": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-server@1.15.0-7.el9_8.2.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_id": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-server-minimal@1.15.0-7.el9_8.2.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                "product": {
                  "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_id": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc@1.15.0-7.el9_8.2.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                "product": {
                  "name": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                  "product_id": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-license@1.15.0-7.el9_8.2.tuxcare.els1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                "product": {
                  "name": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                  "product_id": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-selinux@1.15.0-7.el9_8.2.tuxcare.els1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                "product": {
                  "name": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                  "product_id": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/tigervnc-icons@1.15.0-7.el9_8.2.tuxcare.els1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch"
        },
        "product_reference": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch"
        },
        "product_reference": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch"
        },
        "product_reference": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        },
        "product_reference": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64"
        },
        "product_reference": "tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch"
        },
        "product_reference": "tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch"
        },
        "product_reference": "tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch"
        },
        "product_reference": "tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
        "relates_to_product_reference": "Rocky Linux-9.8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-93518",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS).",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-93518"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T18:44:25.755785Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059",
          "product_ids": [
            "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-93517",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-93517"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T18:44:25.755785Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059",
          "product_ids": [
            "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-93519",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
          "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-93519"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-23T18:44:25.755785Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059",
          "product_ids": [
            "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-icons-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-license-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-selinux-0:1.15.0-7.el9_8.2.tuxcare.els1.noarch",
            "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-minimal-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:tigervnc-server-module-0:1.15.0-7.el9_8.2.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792781059"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    }
  ]
}