Linux · Security advisory · April 16, 2020

RHSA-2020:1497: Security update for 7 packages

RHSA-2020:1497, released April 16, 2020, fixes 5 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0477
91st percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
tigervncRHEL 80:1.9.0-14.el8_1
tigervnc-iconsRHEL 80:1.9.0-14.el8_1
tigervnc-licenseRHEL 80:1.9.0-14.el8_1
tigervnc-serverRHEL 80:1.9.0-14.el8_1
tigervnc-server-appletRHEL 80:1.9.0-14.el8_1
tigervnc-server-minimalRHEL 80:1.9.0-14.el8_1
tigervnc-server-moduleRHEL 80:1.9.0-14.el8_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-15692 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.2 0.0477 None reported
High CVE-2019-15691 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.2 0.0472 None reported
High CVE-2019-15694 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.2 0.0449 None reported
High CVE-2019-15695 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.2 0.0449 None reported
High CVE-2019-15693 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.2 0.0428 None reported
Showing 1 to 5 of 5 1