Red Hat Product Errata RHSA-2026:46456 - Security Advisory Issued: 2026-07-27 Updated: 2026-07-27 RHSA-2026:46456 - Security Advisory Overview Updated Packages Synopsis Important: tigervnc security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for tigervnc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2485380 - CVE-2026-50256 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch BZ - 2485382 - CVE-2026-50257 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() BZ - 2485383 - CVE-2026-50258 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels BZ - 2485384 - CVE-2026-50259 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing BZ - 2485385 - CVE-2026-50260 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() BZ - 2485386 - CVE-2026-50261 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() BZ - 2485387 - CVE-2026-50262 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes BZ - 2485388 - CVE-2026-50263 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() BZ - 2485389 - CVE-2026-50264 xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat CVEs CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM tigervnc-1.13.1-8.el9_4.10.src.rpm SHA-256: 6e6babab1b60d4145e97c742ef2297e5fc8ae2be5ea504485e556863752c7d6e x86_64 tigervnc-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 6a68903d7395b067cd20d5e845f51119a90cf52adf24edc3fc1e55533ba44ea7 tigervnc-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 2b5bda4eb84c29bba61ce1efa2df63593e5cecf6e15376d914e6bb0ed12beb32 tigervnc-debugsource-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: a112427cf75fa3ab79bef64a59df53a4f1dbcdc3797053d1839016239bdd0e85 tigervnc-icons-1.13.1-8.el9_4.10.noarch.rpm SHA-256: 09a024f85cdab826827ed7df4c3d4f3506b4d15b9a58d4e8a8ac025050bc3132 tigervnc-license-1.13.1-8.el9_4.10.noarch.rpm SHA-256: c2c81cda1ace83fb721efae53ec0a2e052be202b09064c49c483508d7e893bf7 tigervnc-selinux-1.13.1-8.el9_4.10.noarch.rpm SHA-256: d1861b69a4372300a6d3940cc523192f5fafa8bbe753e8bb8ebad9029a335953 tigervnc-server-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 89ac5e2b25b4c195576210f3c9d183285d24934f04e4813e2d88b981b49eaa01 tigervnc-server-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: d89193fa055480c00a276f1055923c0ceb04acb78879bea370d520a78dda22cd tigervnc-server-minimal-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: e04267718d61236184039830ae1d26f8cb8088d7252e625cb7204164dd5a73c0 tigervnc-server-minimal-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: b3aca47371d9b50ba8084c28de41dff3ad339e3b3bf1fc53e0bb57647a82fe60 tigervnc-server-module-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 4c28f9714df9e9853e19b9e40925abc4d578b101f711f508c20008a9b0de7da3 tigervnc-server-module-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: cb6658512db988a7a71ae2f6247065c4b348b56f273e003b44d4b760d29ad199 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM tigervnc-1.13.1-8.el9_4.10.src.rpm SHA-256: 6e6babab1b60d4145e97c742ef2297e5fc8ae2be5ea504485e556863752c7d6e ppc64le tigervnc-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: 696bd8d286cf4233d659901ce6a28cee1c3d4db6692e4dbc6008a127d86a2e6d tigervnc-debuginfo-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: 142f8a9e022002b691065313499d7e7cee429ab2a4101bd96aa1a6e9a720755e tigervnc-debugsource-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: b544c2f873b80bb0c7f4639ac744cf08f31a53bd42364ca2c71dae226d13b230 tigervnc-icons-1.13.1-8.el9_4.10.noarch.rpm SHA-256: 09a024f85cdab826827ed7df4c3d4f3506b4d15b9a58d4e8a8ac025050bc3132 tigervnc-license-1.13.1-8.el9_4.10.noarch.rpm SHA-256: c2c81cda1ace83fb721efae53ec0a2e052be202b09064c49c483508d7e893bf7 tigervnc-selinux-1.13.1-8.el9_4.10.noarch.rpm SHA-256: d1861b69a4372300a6d3940cc523192f5fafa8bbe753e8bb8ebad9029a335953 tigervnc-server-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: 228a89e5ad521c5aac9863e63660cb7b0b4a5b555c82b00aecf4ef8dd5108266 tigervnc-server-debuginfo-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: 3be007ab9531667e4224d55e6699cca3de28fe60cd3ce2b79ddae9686b81287f tigervnc-server-minimal-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: 320a445a81a32ded9b7ef4282ed589a0088080b63ad337ef49c519d0a3d1cbeb tigervnc-server-minimal-debuginfo-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: 630d741931c0246c75cbe9a948b4d6713eb6d9e36c2b00a15aab1eef10e842f7 tigervnc-server-module-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: ff9af10088a392fb8e07911242a099f95bcd3decaa21185bf4eb11c7c72219fd tigervnc-server-module-debuginfo-1.13.1-8.el9_4.10.ppc64le.rpm SHA-256: aac0a0162162a889a2d4f8ebe9c23386a594440fb024c07c2341ac39d56bee5a Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM tigervnc-1.13.1-8.el9_4.10.src.rpm SHA-256: 6e6babab1b60d4145e97c742ef2297e5fc8ae2be5ea504485e556863752c7d6e x86_64 tigervnc-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 6a68903d7395b067cd20d5e845f51119a90cf52adf24edc3fc1e55533ba44ea7 tigervnc-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 2b5bda4eb84c29bba61ce1efa2df63593e5cecf6e15376d914e6bb0ed12beb32 tigervnc-debugsource-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: a112427cf75fa3ab79bef64a59df53a4f1dbcdc3797053d1839016239bdd0e85 tigervnc-icons-1.13.1-8.el9_4.10.noarch.rpm SHA-256: 09a024f85cdab826827ed7df4c3d4f3506b4d15b9a58d4e8a8ac025050bc3132 tigervnc-license-1.13.1-8.el9_4.10.noarch.rpm SHA-256: c2c81cda1ace83fb721efae53ec0a2e052be202b09064c49c483508d7e893bf7 tigervnc-selinux-1.13.1-8.el9_4.10.noarch.rpm SHA-256: d1861b69a4372300a6d3940cc523192f5fafa8bbe753e8bb8ebad9029a335953 tigervnc-server-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 89ac5e2b25b4c195576210f3c9d183285d24934f04e4813e2d88b981b49eaa01 tigervnc-server-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: d89193fa055480c00a276f1055923c0ceb04acb78879bea370d520a78dda22cd tigervnc-server-minimal-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: e04267718d61236184039830ae1d26f8cb8088d7252e625cb7204164dd5a73c0 tigervnc-server-minimal-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: b3aca47371d9b50ba8084c28de41dff3ad339e3b3bf1fc53e0bb57647a82fe60 tigervnc-server-module-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: 4c28f9714df9e9853e19b9e40925abc4d578b101f711f508c20008a9b0de7da3 tigervnc-server-module-debuginfo-1.13.1-8.el9_4.10.x86_64.rpm SHA-256: cb6658512db988a7a71ae2f6247065c4b348b56f273e003b44