RHEL 10 : xorg-x11-server-Xwayland (RHSA-2025:19435)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19435 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: xmayland: Use-after-free in XPresentNotify structure...

Oracle Linux 8 : xorg-x11-server (ELSA-2025-19434)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19434 advisory. 1.20.11-27 - CVE fix for: CVE-2025-62229 RHEL-119953, CVE-2025-62230 RHEL-120027, CVE-2025-62231 RHEL-124993 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2025:3866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 Fixed value overflow in Xkb extension XkbSetCompatMap CVE-2025-62231,...

xwayland-24.1.8-4.1 on GA media (moderate)

xwayland-24.1.8-4.1 on GA media Announcement ID: openSUSE-SU-2025:15684-1 Rating: moderate Cross-References: CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 CVSS scores: CVE-2025-62229 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-62229 SUSE : 7.7...

xorg-x11-server-21.1.15-7.1 on GA media (moderate)

xorg-x11-server-21.1.15-7.1 on GA media Announcement ID: openSUSE-SU-2025:15683-1 Rating: moderate Cross-References: CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 CVSS scores: CVE-2025-62229 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-62229 SUSE : 7.7...

CVE-2025-62230

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

Slackware: Security Advisory (SSA:2025-302-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : xorg-x11-server-Xwayland (2025-fe61a6ad60)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fe61a6ad60 advisory. Update to xwayland 24.1.9 CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231 Tenable has extracted the preceding description block directly...

Slackware: Security Advisory (SSA:2025-302-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-18slack15.0.txz: Rebuilt. This update fixes security issues: Use-after-free in XPresentNotify structures...

Debian: Security Advisory (DLA-4353-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6044-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-62230

creationtimestamp| type| source ---|---|--- 2025-10-28 19:36:57+00:00| seen| https://gist.github.com/EbonJaeger/8496c1190b0924aa057e7408ff20115f 2025-10-28 23:15:00+00:00| seen| Telegram/V3P1JlxxMdUouo9e-Koxqu6gS-6GfrGho2omrfdKlE-yanE 2025-10-29 04:00:00+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-62230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in the X.Org X server's X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without...

PrestaShop Cross-Site Scripting Vulnerability (CNVD-2022-62230)

PrestaShop is an open source e-commerce solution from PrestaShop Inc. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. PrestaShop module 5.0.2 prior versions of cross-site scripting vulnerability, the vulnerability stems from t...