Red Hat Security Advisory

RHSA-2025:22364

xorg-x11-server security update

Released 2025-12-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) xorg-x11-server-1.20.11-19.el9_2, xorg-x11-server-Xdmx-1.20.11-19.el9_2, xorg-x11-server-Xephyr-1.20.11-19.el9_2 +4

Fixes 3 records

TI-2025-38539 CVE-2025-62229 · GHSA-49pm-cgmh-hw25

Xorg: xmayland: use-after-free in xpresentnotify structure creation

LOW 35

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00508 Published 2025-10-30 Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-416

TI-2025-38541 CVE-2025-62231 · GHSA-h4r4-6hvf-34r8

Xorg: xmayland: value overflow in xkbsetcompatmap()

LOW 34

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00297 Published 2025-10-30 Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-190

TI-2025-38540 CVE-2025-62230 · GHSA-892r-x96w-jh76

Xorg: xwayland: use-after-free in xkb client resource removal

LOW 34

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00282 Published 2025-10-30 Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-416