Red Hat Product Errata RHSA-2025:19623 - Security Advisory
Issued:
2025-11-04
Updated:
2025-11-04

RHSA-2025:19623 - Security Advisory

Synopsis

Moderate: xorg-x11-server-Xwayland update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Please update

Description

Please update

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

  • BZ - 2402649 - CVE-2025-62229 xorg: xmayland: Use-after-free in XPresentNotify structure creation
  • BZ - 2402653 - CVE-2025-62230 xorg: xwayland: Use-after-free in Xkb client resource removal
  • BZ - 2402660 - CVE-2025-62231 xorg: xmayland: Value overflow in XkbSetCompatMap()

Red Hat Enterprise Linux for x86_64 9

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
x86_64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.x86_64.rpm SHA-256: 00b39f2daa11d3c6bf5874647e2880f9031845a5359dd19945c69abe991a9eb4
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.x86_64.rpm SHA-256: f99e1355605cedb1c5405837c253583848b0549c8f9a58cb80c257657dcb6c00
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.x86_64.rpm SHA-256: 3588e0b526fa6708fc3ee98895ccc6682467fd18ad156b7a1cb727b61075c160

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
x86_64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.x86_64.rpm SHA-256: 00b39f2daa11d3c6bf5874647e2880f9031845a5359dd19945c69abe991a9eb4
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.x86_64.rpm SHA-256: f99e1355605cedb1c5405837c253583848b0549c8f9a58cb80c257657dcb6c00
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.x86_64.rpm SHA-256: 3588e0b526fa6708fc3ee98895ccc6682467fd18ad156b7a1cb727b61075c160

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
x86_64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.x86_64.rpm SHA-256: 00b39f2daa11d3c6bf5874647e2880f9031845a5359dd19945c69abe991a9eb4
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.x86_64.rpm SHA-256: f99e1355605cedb1c5405837c253583848b0549c8f9a58cb80c257657dcb6c00
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.x86_64.rpm SHA-256: 3588e0b526fa6708fc3ee98895ccc6682467fd18ad156b7a1cb727b61075c160

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
s390x
xorg-x11-server-Xwayland-23.2.7-5.el9_6.s390x.rpm SHA-256: fe9ce7ec29bf98a7361ad207cac670b5616f6ccea38b70767aeaa9b00083cfd8
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.s390x.rpm SHA-256: f95fcfb18a16504df4218480b91d005e03909e65742def554f946e321522d1fe
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.s390x.rpm SHA-256: 77ec95e91726536b89010aca03c2023fd5494ddf4a04219d32576f743f69c9fd

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
s390x
xorg-x11-server-Xwayland-23.2.7-5.el9_6.s390x.rpm SHA-256: fe9ce7ec29bf98a7361ad207cac670b5616f6ccea38b70767aeaa9b00083cfd8
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.s390x.rpm SHA-256: f95fcfb18a16504df4218480b91d005e03909e65742def554f946e321522d1fe
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.s390x.rpm SHA-256: 77ec95e91726536b89010aca03c2023fd5494ddf4a04219d32576f743f69c9fd

Red Hat Enterprise Linux for Power, little endian 9

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
ppc64le
xorg-x11-server-Xwayland-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 530d1c8c47727d27176239064fed332bfc7bca88059c95b0e88475b2ee2f139d
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 728c3334dd1648fb94ee919af8ceeecaad1ad42ab8016b0001e7ecd74244edf6
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 679d2cab48ebc082ba0b20557bb7c4b6356df184e218e53efec74ede7cc42e86

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
ppc64le
xorg-x11-server-Xwayland-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 530d1c8c47727d27176239064fed332bfc7bca88059c95b0e88475b2ee2f139d
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 728c3334dd1648fb94ee919af8ceeecaad1ad42ab8016b0001e7ecd74244edf6
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 679d2cab48ebc082ba0b20557bb7c4b6356df184e218e53efec74ede7cc42e86

Red Hat Enterprise Linux for ARM 64 9

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
aarch64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.aarch64.rpm SHA-256: 03c5d3dd47eb5af3dae3e8c03a6f61fa3c9202ad3e1ab57dfaa9d0e83d66e173
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.aarch64.rpm SHA-256: a1dd99c3ab42bac35870819c3cd80aa042d8464ca0fd17878d44b7692dc594ea
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.aarch64.rpm SHA-256: a12ad035f30925a51acbcc48b7e9b21ed5297a7a826275c98da653126fc9f82e

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
aarch64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.aarch64.rpm SHA-256: 03c5d3dd47eb5af3dae3e8c03a6f61fa3c9202ad3e1ab57dfaa9d0e83d66e173
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.aarch64.rpm SHA-256: a1dd99c3ab42bac35870819c3cd80aa042d8464ca0fd17878d44b7692dc594ea
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.aarch64.rpm SHA-256: a12ad035f30925a51acbcc48b7e9b21ed5297a7a826275c98da653126fc9f82e

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
ppc64le
xorg-x11-server-Xwayland-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 530d1c8c47727d27176239064fed332bfc7bca88059c95b0e88475b2ee2f139d
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 728c3334dd1648fb94ee919af8ceeecaad1ad42ab8016b0001e7ecd74244edf6
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 679d2cab48ebc082ba0b20557bb7c4b6356df184e218e53efec74ede7cc42e86

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
x86_64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.x86_64.rpm SHA-256: 00b39f2daa11d3c6bf5874647e2880f9031845a5359dd19945c69abe991a9eb4
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.x86_64.rpm SHA-256: f99e1355605cedb1c5405837c253583848b0549c8f9a58cb80c257657dcb6c00
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.x86_64.rpm SHA-256: 3588e0b526fa6708fc3ee98895ccc6682467fd18ad156b7a1cb727b61075c160

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.i686.rpm SHA-256: 6b7e015ca9be51bb9844791baac3feb385280a92b0e4e2383fe613d3284ac636
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.i686.rpm SHA-256: da6499b70ce889a499b9927f947e81af720610f5fab938a02933258c9dde3e01
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.x86_64.rpm SHA-256: f99e1355605cedb1c5405837c253583848b0549c8f9a58cb80c257657dcb6c00
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.i686.rpm SHA-256: e66db08a7ffc9a965fb49daf6e35e707a2d1cce80803edff4db76425fc3ff180
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.x86_64.rpm SHA-256: 3588e0b526fa6708fc3ee98895ccc6682467fd18ad156b7a1cb727b61075c160
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.i686.rpm SHA-256: f11344f0f778610e6f0221ffbbfc40e7f9a23db8a65eb233464fdf13e042bd84
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.x86_64.rpm SHA-256: 7f200d3a1fe3636ac9d28ee28736c0d6ea00d079ee7a6349c601e33ff6929179

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 728c3334dd1648fb94ee919af8ceeecaad1ad42ab8016b0001e7ecd74244edf6
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 679d2cab48ebc082ba0b20557bb7c4b6356df184e218e53efec74ede7cc42e86
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 19fff788b07223de1ae5ff6a35fb079fd12270a43f0a0851be47451d5106f534

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.aarch64.rpm SHA-256: a1dd99c3ab42bac35870819c3cd80aa042d8464ca0fd17878d44b7692dc594ea
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.aarch64.rpm SHA-256: a12ad035f30925a51acbcc48b7e9b21ed5297a7a826275c98da653126fc9f82e
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.aarch64.rpm SHA-256: b20745bf296e53bf6801452a52bc48ee7484d718738a697bef1f3d8ef9dd2737

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.s390x.rpm SHA-256: f95fcfb18a16504df4218480b91d005e03909e65742def554f946e321522d1fe
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.s390x.rpm SHA-256: 77ec95e91726536b89010aca03c2023fd5494ddf4a04219d32576f743f69c9fd
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.s390x.rpm SHA-256: 64ccceb4c1c7dcc67711fbe27c675c3b3943f80e80a961669827ae486469bed9

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.i686.rpm SHA-256: 6b7e015ca9be51bb9844791baac3feb385280a92b0e4e2383fe613d3284ac636
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.i686.rpm SHA-256: da6499b70ce889a499b9927f947e81af720610f5fab938a02933258c9dde3e01
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.x86_64.rpm SHA-256: f99e1355605cedb1c5405837c253583848b0549c8f9a58cb80c257657dcb6c00
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.i686.rpm SHA-256: e66db08a7ffc9a965fb49daf6e35e707a2d1cce80803edff4db76425fc3ff180
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.x86_64.rpm SHA-256: 3588e0b526fa6708fc3ee98895ccc6682467fd18ad156b7a1cb727b61075c160
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.i686.rpm SHA-256: f11344f0f778610e6f0221ffbbfc40e7f9a23db8a65eb233464fdf13e042bd84
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.x86_64.rpm SHA-256: 7f200d3a1fe3636ac9d28ee28736c0d6ea00d079ee7a6349c601e33ff6929179

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 728c3334dd1648fb94ee919af8ceeecaad1ad42ab8016b0001e7ecd74244edf6
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 679d2cab48ebc082ba0b20557bb7c4b6356df184e218e53efec74ede7cc42e86
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.ppc64le.rpm SHA-256: 19fff788b07223de1ae5ff6a35fb079fd12270a43f0a0851be47451d5106f534

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.s390x.rpm SHA-256: f95fcfb18a16504df4218480b91d005e03909e65742def554f946e321522d1fe
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.s390x.rpm SHA-256: 77ec95e91726536b89010aca03c2023fd5494ddf4a04219d32576f743f69c9fd
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.s390x.rpm SHA-256: 64ccceb4c1c7dcc67711fbe27c675c3b3943f80e80a961669827ae486469bed9

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.aarch64.rpm SHA-256: a1dd99c3ab42bac35870819c3cd80aa042d8464ca0fd17878d44b7692dc594ea
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.aarch64.rpm SHA-256: a12ad035f30925a51acbcc48b7e9b21ed5297a7a826275c98da653126fc9f82e
xorg-x11-server-Xwayland-devel-23.2.7-5.el9_6.aarch64.rpm SHA-256: b20745bf296e53bf6801452a52bc48ee7484d718738a697bef1f3d8ef9dd2737

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
aarch64
xorg-x11-server-Xwayland-23.2.7-5.el9_6.aarch64.rpm SHA-256: 03c5d3dd47eb5af3dae3e8c03a6f61fa3c9202ad3e1ab57dfaa9d0e83d66e173
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.aarch64.rpm SHA-256: a1dd99c3ab42bac35870819c3cd80aa042d8464ca0fd17878d44b7692dc594ea
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.aarch64.rpm SHA-256: a12ad035f30925a51acbcc48b7e9b21ed5297a7a826275c98da653126fc9f82e

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-5.el9_6.src.rpm SHA-256: b342750e02c58728196f8892ad3c22a26d2d35ee507bc35adae15269d15a3485
s390x
xorg-x11-server-Xwayland-23.2.7-5.el9_6.s390x.rpm SHA-256: fe9ce7ec29bf98a7361ad207cac670b5616f6ccea38b70767aeaa9b00083cfd8
xorg-x11-server-Xwayland-debuginfo-23.2.7-5.el9_6.s390x.rpm SHA-256: f95fcfb18a16504df4218480b91d005e03909e65742def554f946e321522d1fe
xorg-x11-server-Xwayland-debugsource-23.2.7-5.el9_6.s390x.rpm SHA-256: 77ec95e91726536b89010aca03c2023fd5494ddf4a04219d32576f743f69c9fd

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.