p PatchFirst

SUSE-SU-2025:01978-1

SUSE-SU-2025:01978-1 · Security update for xorg-x11-server

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087). - CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089). - CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.57.1

    Update to 1.20.3-150400.38.57.1

  • xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.57.1

    Update to 1.20.3-150400.38.57.1

  • xorg-x11-server SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.57.1

    Update to 1.20.3-150400.38.57.1

  • xorg-x11-server SUSE:Linux Enterprise Server for SAP Applications 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.57.1

    Update to 1.20.3-150400.38.57.1

  • xorg-x11-server SUSE:Manager Proxy 4.3

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.57.1

    Update to 1.20.3-150400.38.57.1

  • xorg-x11-server SUSE:Manager Server 4.3

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.57.1

    Update to 1.20.3-150400.38.57.1

Original sources

Check your server →