{"id":"RHSA-2025:10351","summary":"Red Hat Security Advisory: xorg-x11-server security update","modified":"2026-03-18T10:42:56Z","published":"2025-07-07T10:02:43Z","upstream":["CVE-2025-49175","CVE-2025-49176","CVE-2025-49178","CVE-2025-49179","CVE-2025-49180"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2025:10351"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369947"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369954"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369977"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369978"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369981"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10351.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-49175"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-49175"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49175"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/0885e0b26225c90534642fe911632ec0779eebee"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/2024"},{"type":"ARTICLE","url":"https://www.x.org/wiki/Development/Security/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-49176"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-49176"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49176"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-49178"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-49178"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49178"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/d55c54cecb5e83eaa2d56bed5cc4461f9ba318c2"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-49179"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-49179"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49179"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-49180"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-49180"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49180"},{"type":"ARTICLE","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6"}],"affected":[{"package":{"name":"xorg-x11-server","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xdmx","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xdmx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xdmx-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xephyr","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xephyr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xephyr-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xnest","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xnest"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xnest-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xorg","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xorg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xorg-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xvfb","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xvfb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xvfb-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-common","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-debugsource","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-devel","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-source","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/xorg-x11-server-source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xdmx","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xdmx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xdmx-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xephyr","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xephyr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xephyr-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xnest","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xnest"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xnest-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xorg","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xorg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xorg-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xvfb","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xvfb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-Xvfb-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-common","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-debugsource","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-devel","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}},{"package":{"name":"xorg-x11-server-source","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/xorg-x11-server-source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-26.el9_4"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:10351.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}