This update for tigervnc fixes the following issues:
* CVE-2026-34352: Fixed permissions to prevent other users from observing the
screen, or modifying what is sent to the client. (bsc#1260871)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1302=1
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1302=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1302=1
* openSUSE Leap 15.5
zypper in -t patch SUSE-2026-1302=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1302=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* tigervnc-debugsource-1.12.0-150500.4.3.1
* tigervnc-1.12.0-150500.4.3.1
* libXvnc-devel-1.12.0-150500.4.3.1
* xorg-x11-Xvnc-module-1.12.0-150500.4.3.1
* libXvnc1-debuginfo-1.12.0-150500.4.3.1
* libXvnc1-1.12.0-150500.4.3.1
* xorg-x11-Xvnc-module-debuginfo-1.12.0-150500.4.3.1
* xorg-x11-Xvnc-debuginfo-1.12.0-150500.4.3.1
* tigervnc-debuginfo-1.12.0-150500.4.3.1
* xorg-x11-Xvnc-1.12.0-150500.4.3.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
* xorg-x11-Xvnc-novnc-1.12.0-150500.4.3.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* tigervnc-debugsource-1.12.0-150500.4.3.1
* tigervnc-1.12.0-150500.4.3.1
* libXvnc-devel-1.12.0-150500.4.3.1
* libXvnc1-debuginfo-1.12.0-150500.4.3.1
* libXvnc1-1.12.0-150500.4.3.1
* xorg-x11-Xvnc-debuginfo-1.12.0-150500.4.3.1
* tigervnc-debuginfo-1.12.0-150500.4.3.1
* xorg-x11-Xvnc-1.12.0-150500.4.3.1
* SUSE Linux Enterprise Server 15 SP5 LTSS...
Read the Full Advisory* bsc#1260871
## References:
* https://www.suse.com/security/cve/CVE-2026-34352.html
* https://bugzilla.suse.com/show_bug.cgi?id=1260871
Get the latest Linux and open source security news straight to your inbox.