[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-34352/tigervnc

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
81fe25f2 by Salvatore Bonaccorso at 2026-07-03T22:39:10+02:00
Track fixed version for CVE-2026-34352/tigervnc

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -63745,7 +63745,7 @@ CVE-2026-34353 (In OCaml through 4.14.3, Bigarray.reshape allows an integer over
 	NOTE: Fixed by: https://github.com/ocaml/ocaml/commit/c667d0e1c5284f5ec46ee4a99b149fa5ac5dfe30 (5.0.0-alpha0)
 	NOTE: Backport for 4.13.y series: https://github.com/ocaml/ocaml/pull/14691
 CVE-2026-34352 (In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users ...)
-	- tigervnc <unfixed> (bug #1132166)
+	- tigervnc 1.15.0+dfsg-2.1 (bug #1132166)
 	[trixie] - tigervnc <no-dsa> (Minor issue)
 	[bookworm] - tigervnc <no-dsa> (Minor issue)
 	[bullseye] - tigervnc <postponed> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81fe25f2acedca70c1b7c7614ba221a48fa37d80

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81fe25f2acedca70c1b7c7614ba221a48fa37d80
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/ffab88e4/attachment.htm>