{"id":"CLSA-2025-1756409662","summary":"xorg-x11-server: Fix of 8 CVEs","details":"- CVE-2025-26594: refuse to free the root cursor and keep its ref\n- CVE-2025-26595: fix buffer overflow in XkbVModMaskText()\n- CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms\n- CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey()\n- CVE-2025-26598: Xi: Fix barrier device search\n- CVE-2025-26599: always initialize the border clip in compAllocPixmap()\n- CVE-2025-26600: dix: Dequeue pending events on frozen device on removal\n- CVE-2025-26601: postpone actual changes in SyncChangeAlarmAttributes()","modified":"2026-05-27T11:18:23.699354713Z","published":"2025-08-28T19:34:26Z","upstream":["CVE-2025-26594","CVE-2025-26595","CVE-2025-26596","CVE-2025-26597","CVE-2025-26598","CVE-2025-26599","CVE-2025-26600","CVE-2025-26601"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1756409662.html"}],"affected":[{"package":{"name":"xorg-x11-server-Xdmx","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xdmx?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-Xephyr","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xephyr?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-Xnest","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xnest?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-Xorg","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xorg?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-Xvfb","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xvfb?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-Xwayland","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xwayland?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-common","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-common?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}},{"package":{"name":"xorg-x11-server-source","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/xorg-x11-server-source?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2025-1756409662.json"}}],"schema_version":"1.7.5"}