Source: tigervnc Version: 1.15.0+dfsg-2 Severity: important Tags: security upstream X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerability was published for tigervnc. CVE-2026-34352[0]: | In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other | users to observe or manipulate the screen contents, or cause an | application crash, because of incorrect permissions. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-34352 https://www.cve.org/CVERecord?id=CVE-2026-34352 [1] https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI [2] https://www.openwall.com/lists/oss-security/2026/03/26/7 [3] https://github.com/TigerVNC/tigervnc/commit/a3fbb54278ebe91bf573f44b32d64e78a33a4828 Regards, Salvatore
