[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-18slack15.0.txz: Rebuilt. This update fixes security issues: Use-after-free in XPresentNotify structures...

SUSE-SU-2025:3858-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...

[SECURITY] [DLA 4353-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4353-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2025 https://wiki.debian.org/LTS -...

USN-7846-1 xorg-server, xwayland vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code...

[SECURITY] [DSA 6044-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6044-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 29, 2025 https://www.debian.org/security/faq -...

Debian dsa-6044 : xnest - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6044 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6044-1 [email protected]...

Debian dla-4353 : xdmx - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4353 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4353-1 [email protected]...

Debian: Security Advisory (DLA-4353-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6044-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-6044-1 xorg-server - security update

Bulletin has no description...

X.Org Server XkbSetCompatMap Numeric Truncation Error Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

DLA-4353-1 xorg-server - security update

Bulletin has no description...

Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2025-302-01)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.20 / 21.1.4 / 24.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-302-01 advisory. New xorg-server packages are available for Slackware 15.0 and -current to fix security...

Linux Distros Unpatched Vulnerability : CVE-2025-62229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation ca...

CVE-2025-62229

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

CVE-2025-62230

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

CVE-2025-62231

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

Linux Distros Unpatched Vulnerability : CVE-2025-62230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in the X.Org X server's X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without...

Linux Distros Unpatched Vulnerability : CVE-2025-62231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was identified in the X.Org X server's X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned shor...

RockyLinux 9 : xorg-x11-server and xorg-x11-server-Xwayland (RLSA-2025:9303)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:9303 advisory. xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland...