SUSE-SU-2025:3909-1
SUSE-SU-2025:3909-1 · Security update for xorg-x11-server
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) * Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) * Fixed value overflow in Xkb extension XkbSetCompatMap() (CVE-2025-62231, bsc#1251960)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.63.1
Update to 1.20.3-150400.38.63.1
xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.63.1
Update to 1.20.3-150400.38.63.1
xorg-x11-server SUSE:Linux Enterprise Server 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.63.1
Update to 1.20.3-150400.38.63.1
xorg-x11-server SUSE:Linux Enterprise Server for SAP Applications 15 SP4
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.63.1
Update to 1.20.3-150400.38.63.1
xorg-x11-server SUSE:Manager Proxy LTS 4.3
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.63.1
Update to 1.20.3-150400.38.63.1
xorg-x11-server SUSE:Manager Server LTS 4.3
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.63.1
Update to 1.20.3-150400.38.63.1
Original sources
- https://www.suse.com/support/update/announcement/2025/suse-su-20253909-1/
- https://bugzilla.suse.com/1251958
- https://bugzilla.suse.com/1251959
- https://bugzilla.suse.com/1251960
- https://www.suse.com/security/cve/CVE-2025-62229
- https://www.suse.com/security/cve/CVE-2025-62230
- https://www.suse.com/security/cve/CVE-2025-62231
- https://osv.dev/vulnerability/SUSE-SU-2025:3909-1