红帽产品勘误 RHSA-2025:22040 - Security Advisory
发布：
2025-11-25
已更新：
2025-11-25

RHSA-2025:22040 - Security Advisory

概述

Low: xorg-x11-server security update

类型/严重性

Security Advisory: Low

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  • xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  • xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

修复

  • BZ - 2402649 - CVE-2025-62229 xorg: xmayland: Use-after-free in XPresentNotify structure creation
  • BZ - 2402653 - CVE-2025-62230 xorg: xwayland: Use-after-free in Xkb client resource removal
  • BZ - 2402660 - CVE-2025-62231 xorg: xmayland: Value overflow in XkbSetCompatMap()

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
xorg-x11-server-1.20.4-33.el7_9.src.rpm SHA-256: 96ce4db3734a2e7e555409d45272c4c8977a7719eb141392d533759c468c8e12
x86_64
xorg-x11-server-Xdmx-1.20.4-33.el7_9.x86_64.rpm SHA-256: 67ba72a857e73db9b1fec8d56f17bdff7125b35620098f5e87472cbf71fef2ac
xorg-x11-server-Xephyr-1.20.4-33.el7_9.x86_64.rpm SHA-256: 40012a4f9366b461ae872d55a6b837e911f83819eef89d575465f8deea76631b
xorg-x11-server-Xnest-1.20.4-33.el7_9.x86_64.rpm SHA-256: 67ac1c34090c20967cc12b4ad247814be0a8a4e08c9894cd7388d4ad07836a00
xorg-x11-server-Xorg-1.20.4-33.el7_9.x86_64.rpm SHA-256: 2f4b7d3156182fa2fa4e953014b591a36f8d58b5ed7a166b59822e294c828057
xorg-x11-server-Xvfb-1.20.4-33.el7_9.x86_64.rpm SHA-256: ff2f70203aa28cb51323e599cfadcaa0ef80ffbaf2bab3fe299df4da5fe852d1
xorg-x11-server-Xwayland-1.20.4-33.el7_9.x86_64.rpm SHA-256: 088676937410ca8d287efdf9fa587b8a134281583cde83bf8c6fb59122a243ab
xorg-x11-server-common-1.20.4-33.el7_9.x86_64.rpm SHA-256: 4d146842cea76298564c9e9e22b6fbb848059030c94c7d3de71386dd5e31279b
xorg-x11-server-debuginfo-1.20.4-33.el7_9.i686.rpm SHA-256: 4764a2c83019a7add79041706a308c6d18bdac05023810aecba5c037d43ad2f1
xorg-x11-server-debuginfo-1.20.4-33.el7_9.x86_64.rpm SHA-256: 04af48f91591b076826d34bda2dc5565c67ce962bbc2ee957171e7d71a55910a
xorg-x11-server-debuginfo-1.20.4-33.el7_9.x86_64.rpm SHA-256: 04af48f91591b076826d34bda2dc5565c67ce962bbc2ee957171e7d71a55910a
xorg-x11-server-devel-1.20.4-33.el7_9.i686.rpm SHA-256: e1feac62a555338197325508d275415ca13380705e0f43c0cff000d7bab57d16
xorg-x11-server-devel-1.20.4-33.el7_9.x86_64.rpm SHA-256: a1673241b5831909a6be5a04cc800958aa4fa351dfeffce7d282fce41470d3ff
xorg-x11-server-source-1.20.4-33.el7_9.noarch.rpm SHA-256: e71db9ef586deb6f46ac25fd5a846689d9a051dfc4ed9464b44b4f2f59e375d3

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
xorg-x11-server-1.20.4-33.el7_9.src.rpm SHA-256: 96ce4db3734a2e7e555409d45272c4c8977a7719eb141392d533759c468c8e12
s390x
xorg-x11-server-Xdmx-1.20.4-33.el7_9.s390x.rpm SHA-256: c0a44f4e5b9ef05dd7f0cd268f10b2dea5a6eb8da2ad1bfc56be3bddc1f19d4e
xorg-x11-server-Xephyr-1.20.4-33.el7_9.s390x.rpm SHA-256: 2683ed62a05f50d0674a4ba46e4661695e92520ead2d6a4cee5893d481539ced
xorg-x11-server-Xnest-1.20.4-33.el7_9.s390x.rpm SHA-256: 0e3a3979e6932f4bef34ce9ad23ad2312de518c4c65b3339e2137e94acfd3ea0
xorg-x11-server-Xvfb-1.20.4-33.el7_9.s390x.rpm SHA-256: c44d1c2bf1651ac2f2da4094cb763560b7528feb1b4d7cf77bdd5e00d32ed457
xorg-x11-server-Xwayland-1.20.4-33.el7_9.s390x.rpm SHA-256: cc147af993fe9235555331a631c6162474a3094f4b50123fd10da3d329aeb1f8
xorg-x11-server-common-1.20.4-33.el7_9.s390x.rpm SHA-256: 7172ff4660d368ce80ec58eab249dfa48ba9179fc3a90a9dbd5ec42022155efa
xorg-x11-server-debuginfo-1.20.4-33.el7_9.s390x.rpm SHA-256: e3bb47c776eba218b66bb59db1f67d1bcec34acaa06971b72b541e1d411e0137
xorg-x11-server-debuginfo-1.20.4-33.el7_9.s390x.rpm SHA-256: e3bb47c776eba218b66bb59db1f67d1bcec34acaa06971b72b541e1d411e0137
xorg-x11-server-source-1.20.4-33.el7_9.noarch.rpm SHA-256: e71db9ef586deb6f46ac25fd5a846689d9a051dfc4ed9464b44b4f2f59e375d3

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
xorg-x11-server-1.20.4-33.el7_9.src.rpm SHA-256: 96ce4db3734a2e7e555409d45272c4c8977a7719eb141392d533759c468c8e12
ppc64
xorg-x11-server-Xdmx-1.20.4-33.el7_9.ppc64.rpm SHA-256: b1b66e8aa50a77d189bbcdc0e0dca602e998f9538d3b1f624d4700fca80d62f1
xorg-x11-server-Xephyr-1.20.4-33.el7_9.ppc64.rpm SHA-256: 2aa75afa9cba0331dfa82cffff8b605b9c404ea39983319021b5ddfa731f9ca9
xorg-x11-server-Xnest-1.20.4-33.el7_9.ppc64.rpm SHA-256: a0aa23a669e72febeaea91daa35b5931d92d85c1335b0b756d5b73dd778617c4
xorg-x11-server-Xorg-1.20.4-33.el7_9.ppc64.rpm SHA-256: a0157b126d8175fc5af7bf1cee95191c7e146c71266a214659368a3f3f21258a
xorg-x11-server-Xvfb-1.20.4-33.el7_9.ppc64.rpm SHA-256: 298faca62936393e865b355caba2ac6dc563189a2ec392d5425d913158d64225
xorg-x11-server-Xwayland-1.20.4-33.el7_9.ppc64.rpm SHA-256: eb7d6d10a4e29ec4cd0e7ecc2834939438ba5f2c5b92fb3bda46a413945401e2
xorg-x11-server-common-1.20.4-33.el7_9.ppc64.rpm SHA-256: 8dddc1e5292e4a2d876f1de3a269cbcca5ef69d573ddec6e0aa5983bd7ea8635
xorg-x11-server-debuginfo-1.20.4-33.el7_9.ppc.rpm SHA-256: 14c970a661759acf44aeebec3e34e17d233d743c4e9965ffce05f87804a86bf6
xorg-x11-server-debuginfo-1.20.4-33.el7_9.ppc64.rpm SHA-256: af664c4dfdd8370c3dff1c1debfdcb0d4397cebff0a03de376aed34c096cd028
xorg-x11-server-debuginfo-1.20.4-33.el7_9.ppc64.rpm SHA-256: af664c4dfdd8370c3dff1c1debfdcb0d4397cebff0a03de376aed34c096cd028
xorg-x11-server-devel-1.20.4-33.el7_9.ppc.rpm SHA-256: 45236525609d90bd1272f27980b4ab708561c1a07e1a31b3edfdadc39f33fe19
xorg-x11-server-devel-1.20.4-33.el7_9.ppc64.rpm SHA-256: fa45f32bd50919901e8410a7c0ad5f043ecffbd068c00e24117be7bf3e68fc75
xorg-x11-server-source-1.20.4-33.el7_9.noarch.rpm SHA-256: e71db9ef586deb6f46ac25fd5a846689d9a051dfc4ed9464b44b4f2f59e375d3

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
xorg-x11-server-1.20.4-33.el7_9.src.rpm SHA-256: 96ce4db3734a2e7e555409d45272c4c8977a7719eb141392d533759c468c8e12
ppc64le
xorg-x11-server-Xdmx-1.20.4-33.el7_9.ppc64le.rpm SHA-256: bb67151e434c6e563e1be50fc4ba0175fc04d14010fcdade7b6957552f9e2470
xorg-x11-server-Xephyr-1.20.4-33.el7_9.ppc64le.rpm SHA-256: 577b1e2a337364ddafc46f92c21db482f47947b6392d07173ecc7abeef96619a
xorg-x11-server-Xnest-1.20.4-33.el7_9.ppc64le.rpm SHA-256: efcffdd3bb75f3b9f22cf2040313f3b5bb338cc7c049b9ab07bc36eda9dff772
xorg-x11-server-Xorg-1.20.4-33.el7_9.ppc64le.rpm SHA-256: d9881588ad7a4596d94e7df20b0a3969a28ce0b14ab7e046d5092e9cdeb12201
xorg-x11-server-Xvfb-1.20.4-33.el7_9.ppc64le.rpm SHA-256: 004771aa4078c32c764e8db8ec3bfad2896c00691a56d0f905cdda7860f38092
xorg-x11-server-Xwayland-1.20.4-33.el7_9.ppc64le.rpm SHA-256: d80f9641bc7bf319f7615acde7a62c548e687e488531238cf520fc363797cf7b
xorg-x11-server-common-1.20.4-33.el7_9.ppc64le.rpm SHA-256: 2a2ed144ffadeb1de59a58b229a429423efee0e657bb77451d9370ca1ee0be1e
xorg-x11-server-debuginfo-1.20.4-33.el7_9.ppc64le.rpm SHA-256: 6b4074ab2b9a322b8effe6073c41500ccaa78db7d0f85e27e91c3c3d8cb9442f
xorg-x11-server-debuginfo-1.20.4-33.el7_9.ppc64le.rpm SHA-256: 6b4074ab2b9a322b8effe6073c41500ccaa78db7d0f85e27e91c3c3d8cb9442f
xorg-x11-server-devel-1.20.4-33.el7_9.ppc64le.rpm SHA-256: d04be3a1de9a3fc5130719dcfbb8f0f0374e5afbeec03458aa375509a83b17de
xorg-x11-server-source-1.20.4-33.el7_9.noarch.rpm SHA-256: e71db9ef586deb6f46ac25fd5a846689d9a051dfc4ed9464b44b4f2f59e375d3

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。