ALSA-2025:9303

Source
https://errata.almalinux.org/9/ALSA-2025-9303.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2025:9303.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2025:9303
Related
Published
2025-06-23T00:00:00Z
Modified
2025-06-30T13:24:43Z
Summary
Important: xorg-x11-server and xorg-x11-server-Xwayland security update
Details

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  • xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  • xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  • xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  • xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9 / xorg-x11-server-Xdmx

Package

Name
xorg-x11-server-Xdmx
Purl
pkg:rpm/almalinux/xorg-x11-server-Xdmx

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-Xephyr

Package

Name
xorg-x11-server-Xephyr
Purl
pkg:rpm/almalinux/xorg-x11-server-Xephyr

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-Xnest

Package

Name
xorg-x11-server-Xnest
Purl
pkg:rpm/almalinux/xorg-x11-server-Xnest

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-Xorg

Package

Name
xorg-x11-server-Xorg
Purl
pkg:rpm/almalinux/xorg-x11-server-Xorg

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-Xvfb

Package

Name
xorg-x11-server-Xvfb
Purl
pkg:rpm/almalinux/xorg-x11-server-Xvfb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-Xwayland

Package

Name
xorg-x11-server-Xwayland
Purl
pkg:rpm/almalinux/xorg-x11-server-Xwayland

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.2.7-4.el9_6

AlmaLinux:9 / xorg-x11-server-Xwayland-devel

Package

Name
xorg-x11-server-Xwayland-devel
Purl
pkg:rpm/almalinux/xorg-x11-server-Xwayland-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
23.2.7-4.el9_6

AlmaLinux:9 / xorg-x11-server-common

Package

Name
xorg-x11-server-common
Purl
pkg:rpm/almalinux/xorg-x11-server-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-devel

Package

Name
xorg-x11-server-devel
Purl
pkg:rpm/almalinux/xorg-x11-server-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6

AlmaLinux:9 / xorg-x11-server-source

Package

Name
xorg-x11-server-source
Purl
pkg:rpm/almalinux/xorg-x11-server-source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-31.el9_6