Red Hat Security AdvisoryRHSA-2025:9303
xorg-x11-server and xorg-x11-server-Xwayland security update
Released 2025-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-31.el9_6, xorg-x11-server-Xdmx-1.20.11-31.el9_6, xorg-x11-server-Xephyr-1.20.11-31.el9_6 +5
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) xorg-x11-server-Xwayland-23.2.7-4.el9_6, xorg-x11-server-Xwayland-devel-23.2.7-4.el9_6, xorg-x11-server-devel-1.20.11-31.el9_6 +1
Fixes 6 records
Priority LOW 34
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2025-06-17 · Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-190
Priority LOW 32
A flaw was found in the X Record extension.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.0034 · Published 2025-06-17 · Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-190
Priority LOW 32
A flaw was found in the Big Requests extension.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00366 · Published 2025-06-17 · Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-190
Priority LOW 28
A flaw was found in the XFIXES extension.
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2025-06-17 · Partial fix · 24.1.7, 24.1.5-4.el10_0 +3 CWE-200
Priority LOW 27
A flaw was found in the X Rendering extension's handling of animated cursors.
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00344 · Published 2025-06-17 · Partial fix · 24.1.8, 24.1.5-4.el10_0 +29 CWE-125
Priority LOW 24
A flaw was found in the X server's request handling.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00246 · Published 2025-06-17 · Partial fix · 24.1.7, 24.1.5-4.el10_0 +29 CWE-667
