Linux · Security advisory · May 19, 2026

ALSA-2026:19342: Security update for 7 packages

ALSA-2026:19342, released May 19, 2026, fixes 5 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
5
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0049
42nd percentile

Priority of the 5 CVEs

Patch now 0 Urgent 1 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
tigervncalmalinux 91.15.0-7.el9_8.1
tigervnc-iconsalmalinux 91.15.0-7.el9_8.1
tigervnc-licensealmalinux 91.15.0-7.el9_8.1
tigervnc-selinuxalmalinux 91.15.0-7.el9_8.1
tigervnc-serveralmalinux 91.15.0-7.el9_8.1
tigervnc-server-minimalalmalinux 91.15.0-7.el9_8.1
tigervnc-server-modulealmalinux 91.15.0-7.el9_8.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-34000 xorg-server: A flaw was found in the X.Org X server 9.1 0.0049 None reported
High CVE-2026-33999 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling 7.8 0.0038 None reported
High CVE-2026-34001 xorg-x11-server-common: X.Org is an open-source implementation of the X Window System 7.8 0.0026 None reported
High CVE-2026-34352 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 9.8 0.0025 None reported
High CVE-2026-34003 xorg-x11-server-common: X.Org is an open-source implementation of the X Window System 7.8 0.0025 None reported
Showing 1 to 5 of 5 1