[ALSA-2025:9304] Important: xorg-x11-server-Xwayland security update
Type:
security
Severity:
important
Release date:
2025-06-30
Description:
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode (CVE-2025-49177) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179) * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 xorg-x11-server-Xwayland-24.1.5-4.el10_0.aarch64.rpm 319704c02a856fb4a8a876f18d52f9e60ed75eb71000e8b7b7c420ed85bf51c5
aarch64 xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0.aarch64.rpm 4a26551727bc0164db69d7e08c60ab922d1d67171cd6f9046e749f66c430d2b6
ppc64le xorg-x11-server-Xwayland-24.1.5-4.el10_0.ppc64le.rpm 163515bb216868a159b94a980eb8be00f883f0ed40bc8eae4590646ec1b8e18e
ppc64le xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0.ppc64le.rpm 4f27ec5b5643ccdf3f1da6ad128ff5fbe47fde2a1c126823c487689bd0ac0ce3
s390x xorg-x11-server-Xwayland-24.1.5-4.el10_0.s390x.rpm 121ca341685e23f8f2edd9e36c369811efb1aafed066335e05f62fc768e6870e
s390x xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0.s390x.rpm 242c33a86445dc99a4ec38c9c2bf629088d9d01f650c607ea567e51b406f7149
x86_64 xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0.x86_64.rpm a8aa424125e1287e6ad3aa50399681941698da5497235550269e871791de3de3
x86_64 xorg-x11-server-Xwayland-24.1.5-4.el10_0.x86_64.rpm cd92906f5edd57bb17875be19146012454e4755b29ccf67b4c000ac0de319b7e
x86_64_v2 xorg-x11-server-Xwayland-24.1.5-4.el10_0.x86_64_v2.rpm 12f79e5824ad30f41619d05bc5817cb76caccca894257c972417e98d01a7532e
x86_64_v2 xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0.x86_64_v2.rpm 21bdd6ab665df1a388abb629ecf23de2567d2b7fdea921fe57dba5dc96b09820
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.