Summary
[1.14.1-9]
- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
Resolves: RHEL-119987
- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
Resolves: RHEL-120006
- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
Resolves: RHEL-120769
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | tigervnc | 0:1.14.1-9.el9_6 |
| Oracle Linux · 9 | tigervnc-icons | 0:1.14.1-9.el9_6 |
| Oracle Linux · 9 | tigervnc-license | 0:1.14.1-9.el9_6 |
| Oracle Linux · 9 | tigervnc-selinux | 0:1.14.1-9.el9_6 |
| Oracle Linux · 9 | tigervnc-server | 0:1.14.1-9.el9_6 |
| Oracle Linux · 9 | tigervnc-server-minimal | 0:1.14.1-9.el9_6 |
| Oracle Linux · 9 | tigervnc-server-module | 0:1.14.1-9.el9_6 |
Vulnerabilities 3
-
High 7.3
Xorg: xmayland: use-after-free in xpresentnotify structure creation
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption…
-
High 7.3
Xorg: xwayland: use-after-free in xkb client resource removal
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memo…
-
High 7.3
Xorg: xmayland: value overflow in xkbsetcompatmap()
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overfl…