Linux · Security advisory · May 9, 2023

RHSA-2023:2249: xorg-x11-server-Xwayland security update

RHSA-2023:2249, released May 9, 2023, fixes 9 CVEs in xorg-x11-server-Xwayland (version 0:21.1.3-7.el9). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0290
87th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 8 Routine 1

Fixed package versions

ProductReleaseFixed in
xorg-x11-server-XwaylandRHEL 90:21.1.3-7.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-46344 xwayland: A vulnerability was found in X.Org 8.8 0.0290 None reported
High CVE-2022-46341 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 8.8 0.0272 None reported
High CVE-2022-46340 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 8.8 0.0268 None reported
High CVE-2022-46343 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 8.8 0.0256 None reported
High CVE-2022-3550 xorg-x11-server-common: X.Org is an open-source implementation of the X Window System 8.8 0.0203 None reported
High CVE-2022-46342 xorg-x11-server-common: X.Org is an open-source implementation of the X Window System 8.8 0.0141 None reported
High CVE-2022-4283 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.8 0.0108 None reported
High CVE-2023-0494 tigervnc: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment... 7.8 0.0090 None reported
Routine CVE-2022-3551 xorg-x11-server-common: X.Org is an open-source implementation of the X Window System 6.5 0.0241 None reported
Showing 1 to 9 of 9 1