红帽产品勘误 RHSA-2025:22041 - Security Advisory
发布：
2025-11-25
已更新：
2025-11-25

RHSA-2025:22041 - Security Advisory

概述

Important: tigervnc security update

类型/严重性

Security Advisory: Important

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for tigervnc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

  • xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  • xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  • xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

修复

  • BZ - 2402649 - CVE-2025-62229 xorg: xmayland: Use-after-free in XPresentNotify structure creation
  • BZ - 2402653 - CVE-2025-62230 xorg: xwayland: Use-after-free in Xkb client resource removal
  • BZ - 2402660 - CVE-2025-62231 xorg: xmayland: Value overflow in XkbSetCompatMap()

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
tigervnc-1.12.0-6.el8_6.15.src.rpm SHA-256: a9060f0d91e5d530306f691d7e8b6e18a1ac15baf6b3a532c61ad797bc985d38
x86_64
tigervnc-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d3a1bec62e98b2c831d6a1a7ed9dcfd88cdb760fc9f61fd5b45bfde83b69765b
tigervnc-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 65b9544b25f1bca4857c30679ba413ee9638af23b3bdd2944ace542a8a0a2363
tigervnc-debugsource-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d69833436872d48a4b778004ef46c7b2b9d829f3c122c32eda5e4b505dd3194f
tigervnc-icons-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 6b647b2dfefb896b6ddd0193ef47d2dda4750a4d1d1fee85bd1bbb66ba41fef0
tigervnc-license-1.12.0-6.el8_6.15.noarch.rpm SHA-256: d8db027f90932d7fd734c9e69ea5c958d85598b74ffa1b074d2f7bd5f5a422ed
tigervnc-selinux-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 45ec8e68910ed5560eed965786424ed127b7026afaad902e5264f08ed2f654b1
tigervnc-server-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: f3848445d567dde27e29c8fa5ab1e4d884a9689a8be466a03411ffe6f2b66440
tigervnc-server-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: dce81d5b3117680b8da378db069d3f4a06924ab8680567e58ad41d38093dc443
tigervnc-server-minimal-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: cb4f8cd139b2a4aa86f4160b919b13045526124fddd41ae10c75bcb9b010568d
tigervnc-server-minimal-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 5e15e1dd6062d401a94f30d84d4640a74b92eb374e70d555a193af2f9cebc718
tigervnc-server-module-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d9d1cebd6e3510e8b81c2ad89d00837ada0233bd7f0d29be935a7a24946bcb9b
tigervnc-server-module-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 3b6dcc7497462bc3224c8995d3ac0dff4334f3d4cd129e47f91b4374831bd30c

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
tigervnc-1.12.0-6.el8_6.15.src.rpm SHA-256: a9060f0d91e5d530306f691d7e8b6e18a1ac15baf6b3a532c61ad797bc985d38
x86_64
tigervnc-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d3a1bec62e98b2c831d6a1a7ed9dcfd88cdb760fc9f61fd5b45bfde83b69765b
tigervnc-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 65b9544b25f1bca4857c30679ba413ee9638af23b3bdd2944ace542a8a0a2363
tigervnc-debugsource-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d69833436872d48a4b778004ef46c7b2b9d829f3c122c32eda5e4b505dd3194f
tigervnc-icons-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 6b647b2dfefb896b6ddd0193ef47d2dda4750a4d1d1fee85bd1bbb66ba41fef0
tigervnc-license-1.12.0-6.el8_6.15.noarch.rpm SHA-256: d8db027f90932d7fd734c9e69ea5c958d85598b74ffa1b074d2f7bd5f5a422ed
tigervnc-selinux-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 45ec8e68910ed5560eed965786424ed127b7026afaad902e5264f08ed2f654b1
tigervnc-server-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: f3848445d567dde27e29c8fa5ab1e4d884a9689a8be466a03411ffe6f2b66440
tigervnc-server-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: dce81d5b3117680b8da378db069d3f4a06924ab8680567e58ad41d38093dc443
tigervnc-server-minimal-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: cb4f8cd139b2a4aa86f4160b919b13045526124fddd41ae10c75bcb9b010568d
tigervnc-server-minimal-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 5e15e1dd6062d401a94f30d84d4640a74b92eb374e70d555a193af2f9cebc718
tigervnc-server-module-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d9d1cebd6e3510e8b81c2ad89d00837ada0233bd7f0d29be935a7a24946bcb9b
tigervnc-server-module-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 3b6dcc7497462bc3224c8995d3ac0dff4334f3d4cd129e47f91b4374831bd30c

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
tigervnc-1.12.0-6.el8_6.15.src.rpm SHA-256: a9060f0d91e5d530306f691d7e8b6e18a1ac15baf6b3a532c61ad797bc985d38
x86_64
tigervnc-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d3a1bec62e98b2c831d6a1a7ed9dcfd88cdb760fc9f61fd5b45bfde83b69765b
tigervnc-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 65b9544b25f1bca4857c30679ba413ee9638af23b3bdd2944ace542a8a0a2363
tigervnc-debugsource-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d69833436872d48a4b778004ef46c7b2b9d829f3c122c32eda5e4b505dd3194f
tigervnc-icons-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 6b647b2dfefb896b6ddd0193ef47d2dda4750a4d1d1fee85bd1bbb66ba41fef0
tigervnc-license-1.12.0-6.el8_6.15.noarch.rpm SHA-256: d8db027f90932d7fd734c9e69ea5c958d85598b74ffa1b074d2f7bd5f5a422ed
tigervnc-selinux-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 45ec8e68910ed5560eed965786424ed127b7026afaad902e5264f08ed2f654b1
tigervnc-server-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: f3848445d567dde27e29c8fa5ab1e4d884a9689a8be466a03411ffe6f2b66440
tigervnc-server-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: dce81d5b3117680b8da378db069d3f4a06924ab8680567e58ad41d38093dc443
tigervnc-server-minimal-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: cb4f8cd139b2a4aa86f4160b919b13045526124fddd41ae10c75bcb9b010568d
tigervnc-server-minimal-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 5e15e1dd6062d401a94f30d84d4640a74b92eb374e70d555a193af2f9cebc718
tigervnc-server-module-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d9d1cebd6e3510e8b81c2ad89d00837ada0233bd7f0d29be935a7a24946bcb9b
tigervnc-server-module-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 3b6dcc7497462bc3224c8995d3ac0dff4334f3d4cd129e47f91b4374831bd30c

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
tigervnc-1.12.0-6.el8_6.15.src.rpm SHA-256: a9060f0d91e5d530306f691d7e8b6e18a1ac15baf6b3a532c61ad797bc985d38
ppc64le
tigervnc-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: 77ad763a66cbf4deac495dc704075e191ff72d5500fb1c8b07dfbb443c129a9e
tigervnc-debuginfo-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: f69e5dec4c616c305254a223a8a3b297f729205ce4054e336f72212cda37961c
tigervnc-debugsource-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: ea1ba9b698858e30a20e5577a8a37b94785d7020050007312b2cde80f23d9183
tigervnc-icons-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 6b647b2dfefb896b6ddd0193ef47d2dda4750a4d1d1fee85bd1bbb66ba41fef0
tigervnc-license-1.12.0-6.el8_6.15.noarch.rpm SHA-256: d8db027f90932d7fd734c9e69ea5c958d85598b74ffa1b074d2f7bd5f5a422ed
tigervnc-selinux-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 45ec8e68910ed5560eed965786424ed127b7026afaad902e5264f08ed2f654b1
tigervnc-server-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: b43c3976521bbc77670335c3d375f0bcfdba4555d9bacea160a7c550f6e915f0
tigervnc-server-debuginfo-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: a37e290b7933293813590d4bb22326131d1e47d74c7d9fefb4fad08640417053
tigervnc-server-minimal-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: aa64967fc768bf15d0661041ac13227052b65de513e79afe8c24a8aa2e0cea24
tigervnc-server-minimal-debuginfo-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: fa154a27f8db1825e70e0e79f33a6efda1a8a344a66f5119e334e1d66f5dfcf6
tigervnc-server-module-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: 0155aa995ba069b82ffdb5b2c6d4d76b4bc4e5897a46ed95e0f283b2fff7f19f
tigervnc-server-module-debuginfo-1.12.0-6.el8_6.15.ppc64le.rpm SHA-256: 6732c71ce4ad9a22360374780f49d7f402fb3203e7918efd6e870ee70c0daac2

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
tigervnc-1.12.0-6.el8_6.15.src.rpm SHA-256: a9060f0d91e5d530306f691d7e8b6e18a1ac15baf6b3a532c61ad797bc985d38
x86_64
tigervnc-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d3a1bec62e98b2c831d6a1a7ed9dcfd88cdb760fc9f61fd5b45bfde83b69765b
tigervnc-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 65b9544b25f1bca4857c30679ba413ee9638af23b3bdd2944ace542a8a0a2363
tigervnc-debugsource-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d69833436872d48a4b778004ef46c7b2b9d829f3c122c32eda5e4b505dd3194f
tigervnc-icons-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 6b647b2dfefb896b6ddd0193ef47d2dda4750a4d1d1fee85bd1bbb66ba41fef0
tigervnc-license-1.12.0-6.el8_6.15.noarch.rpm SHA-256: d8db027f90932d7fd734c9e69ea5c958d85598b74ffa1b074d2f7bd5f5a422ed
tigervnc-selinux-1.12.0-6.el8_6.15.noarch.rpm SHA-256: 45ec8e68910ed5560eed965786424ed127b7026afaad902e5264f08ed2f654b1
tigervnc-server-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: f3848445d567dde27e29c8fa5ab1e4d884a9689a8be466a03411ffe6f2b66440
tigervnc-server-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: dce81d5b3117680b8da378db069d3f4a06924ab8680567e58ad41d38093dc443
tigervnc-server-minimal-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: cb4f8cd139b2a4aa86f4160b919b13045526124fddd41ae10c75bcb9b010568d
tigervnc-server-minimal-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 5e15e1dd6062d401a94f30d84d4640a74b92eb374e70d555a193af2f9cebc718
tigervnc-server-module-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: d9d1cebd6e3510e8b81c2ad89d00837ada0233bd7f0d29be935a7a24946bcb9b
tigervnc-server-module-debuginfo-1.12.0-6.el8_6.15.x86_64.rpm SHA-256: 3b6dcc7497462bc3224c8995d3ac0dff4334f3d4cd129e47f91b4374831bd30c

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。