Summary
[1.20.4-29.0.5]
- Security update for CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 [Orabug: 38691191]
[1.20.4-29.0.3]
- Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695]
[1.20.4-29.0.1]
- Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596
- CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600
- CVE-2025-26601 [Orabug: 37712847]
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | xorg-x11-server-common | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-devel | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-source | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xdmx | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xephyr | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xnest | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xorg | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xvfb | 0:1.20.4-29.0.5.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xwayland | 0:1.20.4-29.0.5.el7_9 |
Vulnerabilities 3
-
High 7.3
Xorg: xmayland: use-after-free in xpresentnotify structure creation
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption…
-
High 7.3
Xorg: xwayland: use-after-free in xkb client resource removal
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memo…
-
High 7.3
Xorg: xmayland: value overflow in xkbsetcompatmap()
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overfl…