Red Hat Security Advisory

RHSA-2025:10360

xorg-x11-server security update

Released 2025-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) xorg-x11-server-1.20.4-32.el7_9, xorg-x11-server-Xephyr-1.20.4-32.el7_9, xorg-x11-server-Xorg-1.20.4-32.el7_9 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) xorg-x11-server-Xdmx-1.20.4-32.el7_9, xorg-x11-server-Xnest-1.20.4-32.el7_9, xorg-x11-server-Xvfb-1.20.4-32.el7_9 +4

TI-2025-31247 CVE-2025-49180 · GHSA-gpcr-p5wh-5x85

LOW 34

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00332 Published 2025-06-17 Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-190

TI-2025-31246 CVE-2025-49179 · GHSA-q547-25x8-mx66

LOW 32

A flaw was found in the X Record extension.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.0034 Published 2025-06-17 Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-190

TI-2025-31243 CVE-2025-49176 · GHSA-c5wx-c74v-9c3g

LOW 32

A flaw was found in the Big Requests extension.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00366 Published 2025-06-17 Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-190

TI-2025-31242 CVE-2025-49175 · GHSA-2w2m-wpx9-m69r

LOW 27

A flaw was found in the X Rendering extension's handling of animated cursors.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00344 Published 2025-06-17 Partial fix · 24.1.8, 24.1.5-4.el10_0 +29 CWE-125

TI-2025-31245 CVE-2025-49178 · GHSA-69rm-w9qj-3x45

LOW 24

A flaw was found in the X server's request handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00246 Published 2025-06-17 Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-667