[CLSA-2025:1765223770] xorg-x11-server: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2025-12-09 20:01:20 UTC
Description:
- CVE-2025-9632: fix buffer overflow in _XkbSetCompatMap() - CVE-2025-62229: fix use-after-free condition due improper error handling during notification creation leading to DoS - CVE-2025-62230: fix use-after-free condition due freeing certain data structures without properly detaching related resources - CVE-2025-62231: fix unsigned short overflow in XkbSetCompatMap() function
Updated packages:
  • xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:e149a380c0907fb74559fdda58d4a1500a089165cd55550e4a26ec109d6128d1
  • xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:5702aced21db887f6febf0bc68a2741bd4995e59a2d21b43c78aac4de26eb8ab
  • xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:b356e54becf650dd59721a8f9b2ff4c94cc2c7d636df4d77fb69cbd2e0961c6a
  • xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:bf2c95ed05b5029d207ed5407f4017a71390d43a298013314767131ee950a13c
  • xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:b6773e14e3a639e179a12f95972037dc836fde8856179ad645f94c62df9a7c45
  • xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:940f3a8dd6cd608bcbaf2cc82e7c8cdd4d4a82da835f46e442c1fe7720855bd5
  • xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:34aabbf687057a24092c5583428f3f7af31c5ca64c63fb64235944a8332ab583
  • xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els8.i686.rpm
    sha:eb944c4fec56f81fef6e40b928e645a47b0b3763940dd65dc183cb016889fdad
  • xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm
    sha:03b78eac6cca03501262ff298b6c432873e6a56070b9d4e39318f0a0e18e66bc
  • xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els8.noarch.rpm
    sha:29f7b23ca35fab83039e8b5368a5d686f5ea1bd7df9bfa14ebaa2a5b749f6d72
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.