Gyorgy Sarvari 84457b29af tigervnc: ignore CVE-2025-26594...26601
Ignore the following CVEs: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601

Details:
https://nvd.nist.gov/vuln/detail/CVE-2025-26594
https://nvd.nist.gov/vuln/detail/CVE-2025-26595
https://nvd.nist.gov/vuln/detail/CVE-2025-26596
https://nvd.nist.gov/vuln/detail/CVE-2025-26597
https://nvd.nist.gov/vuln/detail/CVE-2025-26598
https://nvd.nist.gov/vuln/detail/CVE-2025-26599
https://nvd.nist.gov/vuln/detail/CVE-2025-26600
https://nvd.nist.gov/vuln/detail/CVE-2025-26601

TigerVNC compiles its own xserver, this is why these CVEs are associated
with it - despite the vulnerabilities being in xserver.

All of these vulnerabilities were fixed by the same PR[1], which has
been part of xserver since version 21.1.16 (the currently used xserver
version in TigerVNC is 21.1.18).

Due to this, ignore these vulnerabilities, and just mark them as patched.

[1]: https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1830

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4924e89bb77fe5486063229c50039a458d60f8ea)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2026-02-10 00:16:43 +01:00
..
2022-04-11 08:52:55 -07:00
2024-02-28 08:18:18 -05:00
2022-05-23 07:37:42 -07:00
2025-11-30 15:13:57 +01:00
2021-10-25 08:38:43 -07:00
2025-10-01 19:40:58 +02:00
2021-08-03 10:21:25 -07:00
2025-09-06 16:27:59 +02:00
2021-12-13 08:15:33 -08:00
2025-11-17 09:08:34 +01:00
2024-12-08 14:38:16 -05:00
2025-10-01 19:40:58 +02:00
2022-03-24 09:45:25 -07:00
2021-08-03 10:21:25 -07:00