Summary
xorg-x11-server
[1.20.11-31]
- CVE fix for: CVE-2025-49175 (RHEL-97289), CVE-2025-49176 (RHEL-97311),
CVE-2025-49178 (RHEL-97388), CVE-2025-49179 (RHEL-97410),
CVE-2025-49180 (RHEL-97255)
[1.20.11-30]
- xfree86: Fix potentially NULL reference to platform device's PCI device
Resolves: https://issues.redhat.com/browse/RHEL-88187
[1.20.11-29]
- Fix LEDs state after suspend/resume
Resolves: https://issues.redhat.com/browse/RHEL-84436
xorg-x11-server-Xwayland
[23.2.7-4]
- CVE fix for: CVE-2025-49175 (RHEL-97341), CVE-2025-49176 (RHEL-97335),
CVE-2025-49177 (RHEL-97358), CVE-2025-49178 (RHEL-97395),
CVE-2025-49179 (RHEL-97405), CVE-2025-49180 (RHEL-97245)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | xorg-x11-server-common | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-devel | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-source | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xdmx | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xephyr | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xnest | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xorg | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xvfb | 0:1.20.11-31.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xwayland | 0:23.2.7-4.el9_6 |
| Oracle Linux · 9 | xorg-x11-server-Xwayland-devel | 0:23.2.7-4.el9_6 |
Vulnerabilities 5
-
High 7.8
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
-
High 7.3
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
-
High 7.3
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.
-
Medium 6.1
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
-
Medium 5.5
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.