Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat X Server Security Update Exposes Graphics System

published 1 year ago

Summary

A security update has been released for Red Hat X Server, a graphics system used by many Linux applications. If not updated, this could allow an attacker to take control of a user's system. Users should update their systems to the latest version of Red Hat X Server to ensure their security is up to date.

What to do

Update redhat xorg-x11-server to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xdmx to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xdmx-debuginfo to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xephyr to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xephyr-debuginfo to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xnest to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xnest-debuginfo to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xorg to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xorg-debuginfo to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xvfb to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-xvfb-debuginfo to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-common to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-debuginfo to version 0:1.20.11-11.el9_0.
Update redhat xorg-x11-server-debugsource to version 0:1.20.11-11.el9_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xdmx	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xdmx-debuginfo	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xephyr	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xephyr-debuginfo	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xnest	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xnest-debuginfo	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xorg	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xorg-debuginfo	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xvfb	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-xvfb-debuginfo	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-common	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-debuginfo	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	xorg-x11-server-debugsource	< 0:1.20.11-11.el9_0 Fix: upgrade to 0:1.20.11-11.el9_0

Original advisory text

Red Hat Security Advisory: xorg-x11-server security update

References

https://access.redhat.com/errata/RHSA-2025:10352 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369947 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369954 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369977 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369978 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369981 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10352.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-49175 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-49175 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-49175 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/0885e0b26225c90534642fe9116... Third Party Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2024 Third Party Advisory
https://www.x.org/wiki/Development/Security/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-49176 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-49176 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-49176 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62... Third Party Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-49178 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-49178 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-49178 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/d55c54cecb5e83eaa2d56bed5cc... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-49179 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-49179 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-49179 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-49180 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-49180 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-49180 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947e... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Timeline

Published7 Jul 2025

Updated4 Jul 2026

First seen4 Jul 2026

Sources

RHSA-2025:10352 · OSV

Track software like this

Free during beta