Release Info

Advisory: CLSA-2025:1756408410

OS: RHEL 7 ELS

Public date: 2025-08-28 19:13:32.941203

Project: xorg-x11-server

Version: 1.20.4-99.el7_9.tuxcare.els1

Errata link: https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1756408410.html

Changelog

- CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText() - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey() - CVE-2025-26598: Xi: Fix barrier device search - CVE-2025-26599: always initialize the border clip in compAllocPixmap() - CVE-2025-26600: dix: Dequeue pending events on frozen device on removal - CVE-2025-26601: postpone actual changes in SyncChangeAlarmAttributes()

Update

Update command: yum update xorg-x11-server*

Packages list

xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els1.i686.rpm xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els1.noarch.rpm

CVEs

CVE-2025-26601
CVE-2025-26599
CVE-2025-26595
CVE-2025-26600
CVE-2025-26594
CVE-2025-26597
CVE-2025-26596
CVE-2025-26598