Linux · Security advisory · May 16, 2023
ALSA-2023:2806: Security update for 8 packages
ALSA-2023:2806, released May 16, 2023, fixes 9 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0290
87th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 8
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| xorg-x11-server-Xdmx | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-Xephyr | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-Xnest | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-Xorg | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-Xvfb | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-common | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-devel | almalinux 8 | 1.20.11-15.el8 |
| xorg-x11-server-source | almalinux 8 | 1.20.11-15.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-46344 | xwayland: A vulnerability was found in X.Org | 8.8 | 0.0290 | None reported | |
| High | CVE-2022-46341 | tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... | 8.8 | 0.0272 | None reported | |
| High | CVE-2022-46340 | tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... | 8.8 | 0.0268 | None reported | |
| High | CVE-2022-46343 | tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... | 8.8 | 0.0256 | None reported | |
| High | CVE-2022-3550 | xorg-x11-server-common: X.Org is an open-source implementation of the X Window System | 8.8 | 0.0203 | None reported | |
| High | CVE-2022-46342 | xorg-x11-server-common: X.Org is an open-source implementation of the X Window System | 8.8 | 0.0141 | None reported | |
| High | CVE-2022-4283 | tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... | 7.8 | 0.0108 | None reported | |
| High | CVE-2023-0494 | tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... | 7.8 | 0.0090 | None reported | |
| Routine | CVE-2022-3551 | xorg-x11-server-common: X.Org is an open-source implementation of the X Window System | 6.5 | 0.0241 | None reported |
Showing 1 to 9 of 9
1