Linux · Security advisory · May 2, 2024

ELSA-2024-2298: Security update for 7 packages

ELSA-2024-2298, released May 2, 2024, fixes 2 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0070
53rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
tigervncol 90:1.13.1-8.el9
tigervnc-iconsol 90:1.13.1-8.el9
tigervnc-licenseol 90:1.13.1-8.el9
tigervnc-selinuxol 90:1.13.1-8.el9
tigervnc-serverol 90:1.13.1-8.el9
tigervnc-server-minimalol 90:1.13.1-8.el9
tigervnc-server-moduleol 90:1.13.1-8.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-5574 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.0 0.0061 None reported
Routine CVE-2023-5380 xnest: A use-after-free flaw was found in the xorg-x11-server 4.7 0.0070 None reported
Showing 1 to 2 of 2 1