Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-49178 EUVD-2025-18501GHSA-69rm-w9qj-3x45

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

Published Jun 17, 2025 · Updated Nov 5, 2026 · Assigned by redhat

Vendor: Red Hat Vendor: X.Org Product: Red Hat Enterprise Linux 10 Product: Red Hat Enterprise Linux 6 Product: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION Product: Red Hat Enterprise Linux 7 Extended Lifecycle Support Product: Red Hat Enterprise Linux 7.7 Advanced Update Support Product: Red Hat Enterprise Linux 8 Product: Red Hat Enterprise Linux 8.2 Advanced Update Support Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Product: Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Product: Red Hat Enterprise Linux 8.6 Telecommunications Update Service Product: Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On Product: Red Hat Enterprise Linux 8.8 Telecommunications Update Service Product: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 9 Product: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Product: Red Hat Enterprise Linux 9.4 Extended Update Support Product: xwayland Package: xorg-server Package: xorg-server Package: xorg-server Package: xorg-server-hwe-16.04 Package: xorg-server-hwe-18.04 Package: xorg-x11-server Package: xorg-x11-server-Xwayland Package: xwayland Package: xwayland Package: xwayland Platform: Linux Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.

Affected products

VendorProductAffectedFixed
X.Org xwayland < 24.1.7 24.1.7
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION — —
Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support — —
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — —
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On — —
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service — —
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions — —
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support — —
Red Hat Red Hat Enterprise Linux 6 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 xorg-server 2:21.1.16-1.2 —
Debian 14 xwayland 2:24.1.8-1 —
Debian 13 xorg-server 2:21.1.16-1.2 —
Debian 13 xwayland No fix yet —
Debian 12 xorg-server 2:21.1.7-3+deb12u10 DSA-5947-1
Debian 12 xwayland No fix yet —
Debian 11 xorg-server 2:1.20.11-1+deb11u16 DLA-4230-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS xorg-server 2:21.1.18-1ubuntu1 —
Ubuntu 26.04 LTS xwayland 2:24.1.6-1ubuntu1 —
Ubuntu 25.10 xorg-server 2:21.1.18-1ubuntu1 —
Ubuntu 25.10 xwayland 2:24.1.6-1ubuntu1 —
Ubuntu 24.04 LTS xorg-server 2:21.1.12-1ubuntu1.4 USN-7573-1
Ubuntu 24.04 LTS xwayland 2:23.2.6-1ubuntu0.6 USN-7573-1
Ubuntu 22.04 LTS xorg-server 2:21.1.4-2ubuntu1.7~22.04.15 USN-7573-1
Ubuntu 22.04 LTS xwayland 2:22.1.1-1ubuntu0.19 USN-7573-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS xorg-server 2:1.20.13-1ubuntu1~20.04.20+esm1 USN-7573-2
Ubuntu Pro 18.04 LTS xorg-server 2:1.19.6-1ubuntu4.15+esm13 USN-7573-2
Ubuntu Pro 18.04 LTS xorg-server-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.11+esm5 USN-7573-2
Ubuntu Pro 16.04 LTS xorg-server 2:1.18.4-0ubuntu0.12+esm18 USN-7573-2
Ubuntu Pro 16.04 LTS xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.6+esm10 USN-7573-2
Ubuntu Pro 14.04 LTS xorg-server No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 xorg-x11-server-Xwayland +1 24.1.5-4.el10_0 RHSA-2025:9304
RHEL 9 tigervnc +6 1.14.1-8.el9_6 RHSA-2025:9306
RHEL 9 xorg-x11-server +8 1.20.11-31.el9_6 RHSA-2025:9303
RHEL 9 xorg-x11-server-Xwayland +1 23.2.7-4.el9_6 RHSA-2025:9303
RHEL 8 tigervnc +6 1.15.0-7.el8_10 RHSA-2025:9392
RHEL 8 xorg-x11-server +8 1.20.11-26.el8_10 RHSA-2025:9305
RHEL 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 RHSA-2025:9305
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS tigervnc +6 1.13.1-8.el9_4.7 RHSA-2025:10374
RHEL 9.4 EUS xorg-x11-server +8 1.20.11-26.el9_4 RHSA-2025:10351
RHEL 9.4 EUS xorg-x11-server-Xwayland 22.1.9-6.el9_4 RHSA-2025:10258
RHEL 9.2 E4S tigervnc +6 1.12.0-14.el9_2.12 RHSA-2025:10410
RHEL 9.2 E4S xorg-x11-server +6 1.20.11-18.el9_2 RHSA-2025:10350
RHEL 9.2 E4S xorg-x11-server-Xwayland 21.1.3-8.el9_2 RHSA-2025:10347
RHEL 9.0 E4S tigervnc +6 1.11.0-22.el9_0.15 RHSA-2025:10381
RHEL 9.0 E4S xorg-x11-server +6 1.20.11-11.el9_0 RHSA-2025:10352
RHEL 9.0 E4S xorg-x11-server-Xwayland 21.1.3-3.el9_0 RHSA-2025:10348
RHEL 8.8 TUS tigervnc +6 1.12.0-15.el8_8.14 RHSA-2025:10355
RHEL 8.8 TUS xorg-x11-server +6 1.20.11-16.el8_8 RHSA-2025:10343
RHEL 8.8 TUS xorg-x11-server-Xwayland 21.1.3-11.el8_8 RHSA-2025:10370
RHEL 8.8 EUS Long Life xorg-x11-server +6 1.20.11-16.el8_8 RHSA-2025:10343
RHEL 8.8 EUS Long Life xorg-x11-server-Xwayland 21.1.3-11.el8_8 RHSA-2025:10370
RHEL 8.8 E4S tigervnc +6 1.12.0-15.el8_8.14 RHSA-2025:10355
RHEL 8.8 E4S xorg-x11-server +6 1.20.11-16.el8_8 RHSA-2025:10343
RHEL 8.8 E4S xorg-x11-server-Xwayland 21.1.3-11.el8_8 RHSA-2025:10370
RHEL 8.6 TUS tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 TUS xorg-x11-server +6 1.20.11-5.el8_6.3 RHSA-2025:10356
RHEL 8.6 TUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.6 EUS Long Life tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 EUS Long Life xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.6 E4S tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 E4S xorg-x11-server +6 1.20.11-5.el8_6.3 RHSA-2025:10356
RHEL 8.6 E4S xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.6 AUS tigervnc +6 1.12.0-6.el8_6.14 RHSA-2025:10344
RHEL 8.6 AUS xorg-x11-server +6 1.20.11-5.el8_6.3 RHSA-2025:10356
RHEL 8.6 AUS xorg-x11-server-Xwayland 21.1.3-2.el8_6.4 RHSA-2025:10346
RHEL 8.4 EUS Long Life tigervnc +6 1.11.0-8.el8_4.13 RHSA-2025:10349
RHEL 8.4 EUS Long Life xorg-x11-server +7 1.20.10-2.el8_4 RHSA-2025:10342
RHEL 8.4 AUS tigervnc +6 1.11.0-8.el8_4.13 RHSA-2025:10349
RHEL 8.4 AUS xorg-x11-server +7 1.20.10-2.el8_4 RHSA-2025:10342
RHEL 8.2 AUS tigervnc +6 1.9.0-15.el8_2.14 RHSA-2025:10378
RHEL 8.2 AUS xorg-x11-server +7 1.20.6-4.el8_2 RHSA-2025:9964
RHEL 7.7 AUS tigervnc +6 1.8.0-17.el7_7.1 RHSA-2025:10376
RHEL 7 ELS tigervnc +6 1.8.0-36.el7_9.2 RHSA-2025:10375
RHEL 7 ELS xorg-x11-server +9 1.20.4-32.el7_9 RHSA-2025:10360
RHEL 6 ELS tigervnc +3 1.1.0-25.el6_10.1 RHSA-2025:10377

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 xorg-x11-server-Xwayland +1 24.1.5-4.el10_0 ALSA-2025:9304
AlmaLinux 9 tigervnc +6 1.14.1-8.el9_6 ALSA-2025:9306
AlmaLinux 9 xorg-x11-server-Xdmx +7 1.20.11-31.el9_6 ALSA-2025:9303
AlmaLinux 9 xorg-x11-server-Xwayland +1 23.2.7-4.el9_6 ALSA-2025:9303
AlmaLinux 8 tigervnc +6 1.15.0-7.el8_10 ALSA-2025:9392
AlmaLinux 8 xorg-x11-server-Xdmx +7 1.20.11-26.el8_10 ALSA-2025:9305
AlmaLinux 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 ALSA-2025:9305

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 xorg-x11-server-Xwayland 24.1.5-4.el10_0 RLSA-2025:9304
Rocky Linux 9 tigervnc 1.14.1-8.el9_6 RLSA-2025:9306
Rocky Linux 9 xorg-x11-server 1.20.11-31.el9_6 RLSA-2025:9303
Rocky Linux 9 xorg-x11-server-Xwayland 23.2.7-4.el9_6 RLSA-2025:9303
Rocky Linux 8 tigervnc 1.15.0-7.el8_10 RLSA-2025:9392
Rocky Linux 8 xorg-x11-server 1.20.11-26.el8_10 RLSA-2025:9305
Rocky Linux 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 RLSA-2025:9305
ReleasePackageFixed inAdvisory
SLES 15 SP7 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01981-1, SUSE-SU-2025:01977-1
SLES 15 SP7 xwayland 24.1.5-150700.3.3.1 SUSE-SU-2025:01975-1
SLES 15 SP6 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01980-1, SUSE-SU-2025:01977-1
SLES 15 SP6 xwayland 24.1.1-150600.5.12.1 SUSE-SU-2025:01974-1
SLES 15 SP5 xorg-x11-server 21.1.4-150500.7.35.1 SUSE-SU-2025:01979-1
SLES 15 SP4 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SLES 15 SP3 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 xorg-x11-server 1.19.6-10.83.1 SUSE-SU-2025:02012-1
SLES for SAP 15 SP5 xorg-x11-server 21.1.4-150500.7.35.1 SUSE-SU-2025:01979-1
SLES for SAP 15 SP4 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SLES for SAP 15 SP3 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
SLE HPC 15 SP5 xorg-x11-server 21.1.4-150500.7.35.1 SUSE-SU-2025:01979-1
SLE HPC 15 SP4 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SLE HPC 15 SP3 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
SUSE Manager Server 4.3 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SUSE Manager Proxy 4.3 xorg-x11-server 1.20.3-150400.38.57.1 SUSE-SU-2025:01978-1
SUSE Enterprise Storage 7.1 xorg-x11-server 1.20.3-150200.22.5.105.1 SUSE-SU-2025:01977-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xorg-x11-server 21.1.15-6.1 openSUSE-SU-2025:15310-1
openSUSE Tumbleweed xwayland 24.1.8-1.1 openSUSE-SU-2025:15311-1
openSUSE Leap 15.6 xorg-x11-server 21.1.11-150600.5.12.1 SUSE-SU-2025:01980-1
openSUSE Leap 15.6 xwayland 24.1.1-150600.5.12.1 SUSE-SU-2025:01974-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xorg-server 21.1.17-r0 —
Alpine v3.24 xwayland 24.1.7-r0 —
Alpine v3.23 xorg-server 21.1.17-r0 —
Alpine v3.23 xwayland 24.1.7-r0 —
Alpine v3.22 xorg-server 21.1.17-r0 —
Alpine v3.22 xwayland 24.1.7-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 tigervnc +6 1.14.1-3.amzn2023.0.2 ALAS2023-2025-1060
Amazon Linux 2023 xorg-x11-server-Xorg +6 21.1.13-5.amzn2023.0.6 ALAS2023-2025-1061
Amazon Linux 2023 xorg-x11-server-Xwayland +1 24.1.3-1.amzn2023.0.2 ALAS2023-2025-1062
Amazon Linux 2 tigervnc +6 1.8.0-24.amzn2.0.6 ALAS2-2025-2917
Amazon Linux 2 xorg-x11-server-Xdmx +8 1.20.4-22.amzn2.0.9 ALAS2-2025-2918

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 xorg-x11-server No fix yet —
Azure Linux 3 xorg-x11-server-Xwayland 24.1.6-2 —
Azure Linux 2 (CBL-Mariner) xorg-x11-server 1.20.10-16 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 xorg-x11-server-Xwayland +1 24.1.5-4.el10_0 ELSA-2025-9304
Oracle Linux 9 tigervnc +6 1.14.1-8.el9_6 ELSA-2025-9306
Oracle Linux 9 xorg-x11-server-Xdmx +7 1.20.11-31.el9_6 ELSA-2025-9303
Oracle Linux 9 xorg-x11-server-Xwayland +1 23.2.7-4.el9_6 ELSA-2025-9303
Oracle Linux 8 tigervnc +6 1.15.0-7.el8_10 ELSA-2025-9392
Oracle Linux 8 xorg-x11-server-Xdmx +7 1.20.11-26.el8_10 ELSA-2025-9305
Oracle Linux 8 xorg-x11-server-Xwayland 21.1.3-18.el8_10 ELSA-2025-9305
Oracle Linux 7 tigervnc +6 1.8.0-33.0.7.el7_9 ELSA-2025-10375
Oracle Linux 7 xorg-x11-server-Xdmx +8 1.20.4-29.0.3.el7_9 ELSA-2025-10360

Advisories 50

References