Home / mailings

PDF

[USN-9088-1] TigerVNC vulnerability

Posted on 13 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9088-1
November 12, 2026

tigervnc vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

TigerVNC could be made to expose sensitive information over the network.

Software Description:
- tigervnc: Virtual network computing server and client

Details:

It was discovered that the TigerVNC viewer stored TLS certificate
exceptions as trusted certificate authorities. A remote attacker could
possibly use this issue to impersonate any VNC server after a user had
added a certificate exception for the attacker's server.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
tigervnc-common 1.7.0+dfsg-8ubuntu2+esm1
Available with Ubuntu Pro
tigervnc-scraping-server 1.7.0+dfsg-8ubuntu2+esm1
Available with Ubuntu Pro
tigervnc-standalone-server 1.7.0+dfsg-8ubuntu2+esm1
Available with Ubuntu Pro
tigervnc-viewer 1.7.0+dfsg-8ubuntu2+esm1
Available with Ubuntu Pro
tigervnc-xorg-extension 1.7.0+dfsg-8ubuntu2+esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-9088-1
CVE-2020-26117

--===============2421516835973349314==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP