Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
xorg-x11-server: Integer Overflow in RandR Extension
published 1 year ago
Summary
A bug in the RandR extension of the xorg-x11-server software can cause an integer overflow, potentially allowing an attacker to execute malicious code. This could happen if a user interacts with a malicious application or website that takes advantage of this vulnerability. To stay secure, update your xorg-x11-server to the latest version.
What to do
- Update redhat xorg-x11-server-xdmx to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-xephyr to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-xnest to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-xorg to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-xvfb to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-xwayland to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-common to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-devel to version 1.20.4-99.el7_9.tuxcare.els4.
- Update redhat xorg-x11-server-source to version 1.20.4-99.el7_9.tuxcare.els4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-xdmx |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-xephyr |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-xnest |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-xorg |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-xvfb |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-xwayland |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-common |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-devel |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
| TuxCare:RHEL:7 | redhat | xorg-x11-server-source |
< 1.20.4-99.el7_9.tuxcare.els4 Fix: upgrade to 1.20.4-99.el7_9.tuxcare.els4
|
Original advisory text
xorg-x11-server: Fix of CVE-2025-49180
- CVE-2025-49180: fix integer overflow in the RandR extension affecting the
RRChangeProviderProperty function
RRChangeProviderProperty function
References
Timeline
Published10 Sep 2025
Updated3 Jun 2026
First seen3 Jun 2026
Sources
CLSA-2025-1757499160 · OSV
Track software like this
Free during beta