[<prev] [day] [month] [year] [list]
Message-ID: <647f7213-3d93-4096-84d9-01e36cdba1ca@oracle.com>
Date: Thu, 26 Mar 2026 14:30:00 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: TigerVNC 1.16.2 security release
I don't see a CVE id listed, but the fix appears to be pretty simple:
shminfo->shmid = shmget(IPC_PRIVATE,
xim->bytes_per_line * xim->height,
- IPC_CREAT|0777);
+ IPC_CREAT|0600);
https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
-------- Forwarded Message --------
Subject: [tigervnc-announce] TigerVNC 1.16.1
Date: Wed, 25 Mar 2026 09:59:26 +0100
From: Pierre Ossman <ossman@...dio.se>
Organization: Cendio AB
To: tigervnc-announce@...glegroups.com
The bug fix release TigerVNC 1.16.1 is now available. This release is primarily a security release to fix an issue in x0vncserver, where other users can observe and manipulate the screen contents. Users of x0vncserver are advised to update immediately.
The release also contains a fix for using the Plain security type with the new w0vncserver, as well as some translation updates.
Binaries are available from SourceForge:
https://sourceforge.net/projects/tigervnc/files/stable/1.16.1
Regards
The TigerVNC Developers
-------- Forwarded Message --------
Subject: [tigervnc-announce] TigerVNC 1.16.2
Date: Thu, 26 Mar 2026 21:49:34 +0100
From: Pierre Ossman <ossman@...dio.se>
Organization: Cendio AB
To: tigervnc-announce@...glegroups.com
This is a second attempt at a bug fix release for the security issue in x0vncserver. The TigerVNC 1.16.1 release unfortunately had all fixes except the security fix.
Apologies for the extra noise and confusion.
Binaries are available from SourceForge:
https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
Regards
The TigerVNC Developers
--
You received this message because you are subscribed to the Google Groups "TigerVNC Announcements" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tigervnc-announce+unsubscribe@...glegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/tigervnc-announce/dcedc354-d653-4354-b281-cfd9f58139be%40cendio.se.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
