tigervnc-1.15.0-6.el9_7.ML.1
エラータID: AXSA:2025-11509:11
リリース日:
2025/12/11 Thursday - 11:57
題名:
tigervnc-1.15.0-6.el9_7.ML.1
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- X.org には、メモリ領域の解放後利用の問題があるため、ローカル
の攻撃者により、任意のコードの実行、およびサービス拒否攻撃
(クラッシュの発生) を可能とする脆弱性が存在します。
(CVE-2025-62229)
- X.org の Xkb 拡張機能には、メモリ領域の解放後利用の問題が
あるため、ローカルの攻撃者により、メモリ破壊、およびサービス拒否
攻撃 (クラッシュの発生) を可能とする脆弱性が存在します。
(CVE-2025-62230)
- X.org の Xkb 拡張機能には、整数オーバーフローの問題があるため、
ローカルの攻撃者により、メモリ破壊、およびサービス拒否攻撃
(クラッシュの発生) を可能とする脆弱性が存在します。
(CVE-2025-62231)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
CVE-2025-62230
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.
CVE-2025-62231
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
追加情報:
N/A
ダウンロード:
SRPMS
- tigervnc-1.15.0-6.el9_7.ML.1.src.rpm
MD5: e247b8618ebe7f9729a01ab8d1bf8bab
SHA-256: c264c007e326e1126be91abd108e702198844e0f47f7876e22d5b1c0bfb10040
Size: 2.07 MB
Asianux Server 9 for x86_64
- tigervnc-1.15.0-6.el9_7.ML.1.x86_64.rpm
MD5: 105deb2201dfe8028aa86dc72716532a
SHA-256: f4d8f4966b31f729c56ff01c22e52533a13bf267d73e01c8ef1addae425e163d
Size: 371.13 kB - tigervnc-icons-1.15.0-6.el9_7.ML.1.noarch.rpm
MD5: 9d2d0a504d33624849649090fa88129b
SHA-256: ed502ee166ffe9f14b8fd1ee0f7ced3f007edc20d50e516e65870c577d5d6dd6
Size: 38.77 kB - tigervnc-license-1.15.0-6.el9_7.ML.1.noarch.rpm
MD5: d269319f587a441209df1ff736727b9b
SHA-256: 34f03ae7b314d2487894edc0a2d770c9d00c6f9cd1e290dee204143d76e5ad7f
Size: 18.70 kB - tigervnc-selinux-1.15.0-6.el9_7.ML.1.noarch.rpm
MD5: 11c887ed44d90928edae22f089c244f7
SHA-256: f9e96ebbce3296eebbb371b159697318b621ccef775719305437cd0ed0e40ae7
Size: 29.28 kB - tigervnc-server-1.15.0-6.el9_7.ML.1.x86_64.rpm
MD5: 2d293b36f395a07f3af381aaec301aeb
SHA-256: 5db9c9dc915c06f7463925cf291d7a19c5230ce02de90cb8ddd0ed4cd19c9bf4
Size: 267.21 kB - tigervnc-server-minimal-1.15.0-6.el9_7.ML.1.x86_64.rpm
MD5: 64e2017039fee9565203e19402738bda
SHA-256: 217c5f65bbc65e8d4c92fd059815debf7e5f5ebe7d72c602bc2187717be80e23
Size: 1.18 MB - tigervnc-server-module-1.15.0-6.el9_7.ML.1.x86_64.rpm
MD5: 1dffb20034c5d61c4e842c2ce7822357
SHA-256: 191e62fce613d4662e8e6a59eb3c2bc8a51688c299b369456a7679494b56a373
Size: 282.45 kB
English