Back Linuxsecurity

Oracle Linux 9 Tigervnc Important Security Advisory ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • June 26, 2026

tigervnc-1.15.0-7.el9_8.2.x86_64.rpm tigervnc-icons-1.15.0-7.el9_8.2.noarch.rpm tigervnc-license-1.15.0-7.el9_8.2.noarch.rpm tigervnc-selinux-1.15.0-7.el9_8.2.noarch.rpm tigervnc-server-1.15.0-7.el9_8.2.x86_64.rpm tigervnc-server-minimal-1.15.0-7.el9_8.2.x86_64.rpm tigervnc-server-module-1.15.0-7.el9_8.2.x86_64.rpm

tigervnc-1.15.0-7.el9_8.2.aarch64.rpm tigervnc-icons-1.15.0-7.el9_8.2.noarch.rpm tigervnc-license-1.15.0-7.el9_8.2.noarch.rpm tigervnc-selinux-1.15.0-7.el9_8.2.noarch.rpm tigervnc-server-1.15.0-7.el9_8.2.aarch64.rpm tigervnc-server-minimal-1.15.0-7.el9_8.2.aarch64.rpm tigervnc-server-module-1.15.0-7.el9_8.2.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Tigervnc Affect Oracle and Rocky Linux Users Recent updates for Tigervnc have addressed multiple critical vulnerabilities affecting Oracle Linux 9 and Rocky Linux 8. The vulnerabilities include CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, and CVE-2026-34003, which were published between April and May 2026. These vulnerabilities can lead to remote access issues and potential exploitation of systems. Oracle Linux 9 users are urged to update to version 1.15.0-7.1, while Rocky Linux 8 users should upgrade to version 1.15.0-10. The updates include fixes for various XKB and XSYNC vulnerabilities, use-after-free issues, and integer overflows. The CVSS scores for these vulnerabilities indicate a high severity, emphasizing the need for immediate action. Administrators are advised to apply these updates promptly to mitigate risks. 12 sources 74

Extracted Entities

CVEs (9)

CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264

Platforms (2)

Oracle Linux Tigervnc