xorg-x11-server

xorg-x11-server-xwayland

This update for xorg-x11-server fixes the following issues:

- CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958).
- CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959).
- CVE-2025-62231: Fixed value overflow in Xkb extension XkbSetCompatMap() (bsc#1251960).

xorg-x11-server-xwayland security update (CVE-2025-62229)

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

* xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

* xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: xorg-x11-server security update

tigervnc

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

* xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

* xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

* xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: tigervnc security update

xorg-x11-server-Xwayland

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

* xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

* xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Multiple use-after-free and value overflow vulnerabilities have been identified in the xorg-x11-server-Xwayland component affecting Red Hat Enterprise Linux 9 and related variants. These vulnerabilities have been assigned CVE identifiers CVE-2025-62229, CVE-2025-62230, and CVE-2025-62231. The issues involve improper memory handling in XPresentNotify structure creation, Xkb client resource removal, and XkbSetCompatMap() function. A security update has been released by Red Hat to address these vulnerabilities. The severity is rated as medium, and no known exploits are currently reported in the wild.

security update for xorg-x11-server-Xwayland

xwayland

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

Search: CVE-2025-62229