SUSE-SU-2026:1173-1

UNKNOWN

Security update for LibVNCServer

Published Apr 2, 2026

Modified 2 weeks ago

Fix available

Details

This update for LibVNCServer fixes the following issues:

CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431).
CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260429).

Affected Packages

LibVNCServer

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

0.9.14-150600.3.6.1

LibVNCServer-devel

SUSE Linux Enterprise Module for Package Hub 15 SP7openSUSE Leap 15.6

Fixed in:

0.9.14-150600.3.6.1

libvncclient1

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

0.9.14-150600.3.6.1

libvncserver1

SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7openSUSE Leap 15.6

Fixed in:

0.9.14-150600.3.6.1

References

Upstream

Ecosystems

Timeline

PublishedApr 2, 2026

ModifiedApr 2, 2026

SUSE-SU-2026:1173-1 | Mondoo Vulnerability Intelligence