p PatchFirst

SUSE-SU-2025:0732-1

SUSE-SU-2025:0732-1 · Security update for xorg-x11-server

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for xorg-x11-server fixes the following issues: - CVE-2025-26594: Use-after-free of the root cursor (bsc#1237427). - CVE-2025-26595: Buffer overflow in XkbVModMaskText() (bsc#1237429). - CVE-2025-26596: Heap overflow in XkbWriteKeySyms() (bsc#1237430). - CVE-2025-26597: Buffer overflow in XkbChangeTypesOfKey() (bsc#1237431). - CVE-2025-26598: Out-of-bounds write in CreatePointerBarrierClient() (bsc#1237432). - CVE-2025-26599: Use of uninitialized pointer in compRedirectWindow() (bsc#1237433). - CVE-2025-26600: Use-after-free in PlayReleasedEvents() (bsc#1237434). - CVE-2025-26601: Use-after-free in SyncInitTrigger() (bsc#1237435).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.54.1

    Update to 1.20.3-150400.38.54.1

  • xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.54.1

    Update to 1.20.3-150400.38.54.1

  • xorg-x11-server SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.54.1

    Update to 1.20.3-150400.38.54.1

  • xorg-x11-server SUSE:Linux Enterprise Server for SAP Applications 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.54.1

    Update to 1.20.3-150400.38.54.1

  • xorg-x11-server SUSE:Manager Proxy 4.3

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.54.1

    Update to 1.20.3-150400.38.54.1

  • xorg-x11-server SUSE:Manager Server 4.3

    Affected ranges
    • ECOSYSTEM: < 1.20.3-150400.38.54.1

    Update to 1.20.3-150400.38.54.1

Original sources

Check your server →