Red Hat Product Errata RHSA-2026:23255 - Security Advisory Issued: 2026-06-04 Updated: 2026-06-04 RHSA-2026:23255 - Security Advisory Overview Updated Packages Synopsis Important: tigervnc security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for tigervnc is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. (CVE-2026-34000) xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling (CVE-2026-34002) xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2451106 - CVE-2026-33999 xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling BZ - 2451107 - CVE-2026-34000 xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. BZ - 2451109 - CVE-2026-34001 xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption BZ - 2451112 - CVE-2026-34002 xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling BZ - 2451113 - CVE-2026-34003 xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access BZ - 2452022 - CVE-2026-34352 TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions CVEs CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 CVE-2026-34352 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM tigervnc-1.12.0-15.el8_8.17.src.rpm SHA-256: 4191f20a545350038b7db50a97317b7979269b13cf2f1eb7f6403550916f3726 x86_64 tigervnc-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 17d779ed5d7f31ef1f3e93d93859c5854a95a1f4a7df01f80e61545fdd7ed7e2 tigervnc-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 0a941ba8182536e725e727e892e6423f5a15d88616e81178add117c5250bef4e tigervnc-debugsource-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: bb3bfd9beb50e29e3d96b964fa264a54dcc3a090dc43dc64b202530cf3667e3e tigervnc-icons-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 0399353cae039ddd0e3e3b2a9ec75cb1fa70426881c550b4513ca9a6ca3f8fcb tigervnc-license-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 63abb08e63bab47ff76662b17ce280f1e469da644d3c69f641302dc65904d437 tigervnc-selinux-1.12.0-15.el8_8.17.noarch.rpm SHA-256: a24824b44a597ffa37984694c5b0f508b20427b8882bd99daa7ec0cf8b729fc7 tigervnc-server-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: dac277f0411419f1698df191aeff95292c492177f0582abcf041317e2ba57b54 tigervnc-server-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: f6ce0f7ae11b0cf1e436dea9b3da61b6e2de1c43912743d02da822d44890f461 tigervnc-server-minimal-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: e22401e917030afad1d519a5bca85553cf8dc63592cedd7083b3050b3f255dfc tigervnc-server-minimal-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: cb48f40f5b1911defc53c2ff9aa66eead1616270db33559b017d2f7a7f25b575 tigervnc-server-module-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: f80d8c263fd173f7d1d0100d6d2bd3a089aa65a74a3fc8562f3b7f408bfde1c4 tigervnc-server-module-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 90c03140347126e6f4e531e8828b3ed47f56216d98f075f9f3430ffc7e2ee5a4 Red Hat Enterprise Linux Server - TUS 8.8 SRPM tigervnc-1.12.0-15.el8_8.17.src.rpm SHA-256: 4191f20a545350038b7db50a97317b7979269b13cf2f1eb7f6403550916f3726 x86_64 tigervnc-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 17d779ed5d7f31ef1f3e93d93859c5854a95a1f4a7df01f80e61545fdd7ed7e2 tigervnc-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 0a941ba8182536e725e727e892e6423f5a15d88616e81178add117c5250bef4e tigervnc-debugsource-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: bb3bfd9beb50e29e3d96b964fa264a54dcc3a090dc43dc64b202530cf3667e3e tigervnc-icons-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 0399353cae039ddd0e3e3b2a9ec75cb1fa70426881c550b4513ca9a6ca3f8fcb tigervnc-license-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 63abb08e63bab47ff76662b17ce280f1e469da644d3c69f641302dc65904d437 tigervnc-selinux-1.12.0-15.el8_8.17.noarch.rpm SHA-256: a24824b44a597ffa37984694c5b0f508b20427b8882bd99daa7ec0cf8b729fc7 tigervnc-server-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: dac277f0411419f1698df191aeff95292c492177f0582abcf041317e2ba57b54 tigervnc-server-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: f6ce0f7ae11b0cf1e436dea9b3da61b6e2de1c43912743d02da822d44890f461 tigervnc-server-minimal-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: e22401e917030afad1d519a5bca85553cf8dc63592cedd7083b3050b3f255dfc tigervnc-server-minimal-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: cb48f40f5b1911defc53c2ff9aa66eead1616270db33559b017d2f7a7f25b575 tigervnc-server-module-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: f80d8c263fd173f7d1d0100d6d2bd3a089aa65a74a3fc8562f3b7f408bfde1c4 tigervnc-server-module-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 90c03140347126e6f4e531e8828b3ed47f56216d98f075f9f3430ffc7e2ee5a4 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM tigervnc-1.12.0-15.el8_8.17.src.rpm SHA-256: 4191f20a545350038b7db50a97317b7979269b13cf2f1eb7f6403550916f3726 ppc64le tigervnc-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: 4fccf2e1ef48cb83616ca3900a22f850a25adde22df39783ae7b1ed649585ac3 tigervnc-debuginfo-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: a658a158020decc61f28b636eb38a2034a9d09103b045370e69ff46e10e76e0f tigervnc-debugsource-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: 5a6e30405eca2431f5c6ed4b7da38250302fd22a553c7cc2e300a2d770528b1e tigervnc-icons-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 0399353cae039ddd0e3e3b2a9ec75cb1fa70426881c550b4513ca9a6ca3f8fcb tigervnc-license-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 63abb08e63bab47ff76662b17ce280f1e469da644d3c69f641302dc65904d437 tigervnc-selinux-1.12.0-15.el8_8.17.noarch.rpm SHA-256: a24824b44a597ffa37984694c5b0f508b20427b8882bd99daa7ec0cf8b729fc7 tigervnc-server-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: a297940b10bdb677c007639ab42764a1ccbafa07140a5851bb3d3edf625bdd44 tigervnc-server-debuginfo-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: 025e8aa7ecfd228f0f7ee8c00ab540909b6577baaabf612801a2c1891791734c tigervnc-server-minimal-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: de31a62711692fc924646e6d6b8262b222c2182f43ec00846f517d743311ddce tigervnc-server-minimal-debuginfo-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: a5699a26d29fad04ce6692447dd06c0904871e5e3195d9c1a79e8f5045f977d4 tigervnc-server-module-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: 4d470c17672ce73528b351d481fc8d264f7cf032cc2b47e365778e1a0e13677b tigervnc-server-module-debuginfo-1.12.0-15.el8_8.17.ppc64le.rpm SHA-256: da8f75ff54244e3abf2ff9b5b241fca8ecd9aff2e986ff341fb6e9294a3aabb6 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM tigervnc-1.12.0-15.el8_8.17.src.rpm SHA-256: 4191f20a545350038b7db50a97317b7979269b13cf2f1eb7f6403550916f3726 x86_64 tigervnc-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 17d779ed5d7f31ef1f3e93d93859c5854a95a1f4a7df01f80e61545fdd7ed7e2 tigervnc-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: 0a941ba8182536e725e727e892e6423f5a15d88616e81178add117c5250bef4e tigervnc-debugsource-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: bb3bfd9beb50e29e3d96b964fa264a54dcc3a090dc43dc64b202530cf3667e3e tigervnc-icons-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 0399353cae039ddd0e3e3b2a9ec75cb1fa70426881c550b4513ca9a6ca3f8fcb tigervnc-license-1.12.0-15.el8_8.17.noarch.rpm SHA-256: 63abb08e63bab47ff76662b17ce280f1e469da644d3c69f641302dc65904d437 tigervnc-selinux-1.12.0-15.el8_8.17.noarch.rpm SHA-256: a24824b44a597ffa37984694c5b0f508b20427b8882bd99daa7ec0cf8b729fc7 tigervnc-server-1.12.0-15.el8_8.17.x86_64.rpm SHA-256: dac277f0411419f1698df191aeff95292c492177f0582abcf041317e2ba57b54 tigervnc-server-debuginfo-1.12.0-15.el8_8.17.x86_64.rpm SHA-2