CVE-2022-49737

xorg-x11-server: This update for xorg-x11-server fixes the following issues: - CVE-2022-49737: Fixed Xorg crashing when client applic...

CVE-2022-49737 is fixed in 22 products on 1 platform, first by DEBIAN-CVE-2022-49737, released March 16, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.7
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0034
27th percentile

This update for xorg-x11-server fixes the following issues: - CVE-2022-49737: Fixed Xorg crashing when client applications use easystroke for mouse gestures (bsc#1239750)

Where it's fixed

ProductFixed inFixReleased
Linux
xnest · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xnest 2:21.1.18-1ubuntu1 Jun 16, 2025
xnest · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xnest 2:21.1.18-1ubuntu1 Jun 16, 2025
xorg-server · Debian 12.15 (bookworm) 2:21.1.7-3+deb12u13 DEBIAN-CVE-2022-49737 Mar 16, 2025
xorg-server · Debian 13.5 (trixie) 2:21.1.16-1.1 DEBIAN-CVE-2022-49737 Mar 16, 2025
xorg-server · Debian 14 2:21.1.16-1.1 DEBIAN-CVE-2022-49737 Mar 16, 2025
xorg-server-source · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xorg-server-source 2:21.1.18-1ubuntu1 Jun 16, 2025
xorg-server-source · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xorg-server-source 2:21.1.18-1ubuntu1 Jun 16, 2025
xorg-x11-server · opensuse-leap 15.6 21.1.11-150600.5.9.1 SUSE-SU-2025:0984-1 Mar 21, 2025
xorg-x11-server · sles 15.6 21.1.11-150600.5.9.1 SUSE-SU-2025:0984-1 Mar 21, 2025
xorg-x11-server-Xephyr · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xephyr-debuginfo · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xnest · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xnest-debuginfo · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xorg · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xorg-debuginfo · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xvfb · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-Xvfb-debuginfo · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-common · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-debuginfo · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-debugsource · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-devel · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xorg-x11-server-source · amzn 2023 21.1.13-5.amzn2023.0.5 ALAS2023-2025-939 Apr 9, 2025
xserver-common · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xserver-common 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-common · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xserver-common 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-xephyr · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xserver-xephyr 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-xephyr · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xserver-xephyr 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-xorg-core · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xserver-xorg-core 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-xorg-core · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xserver-xorg-core 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-xorg-legacy · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xserver-xorg-legacy 2:21.1.18-1ubuntu1 Jun 16, 2025
xserver-xorg-legacy · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xserver-xorg-legacy 2:21.1.18-1ubuntu1 Jun 16, 2025
xvfb · Ubuntu 25.10 (questing) 2:21.1.18-1ubuntu1 xvfb 2:21.1.18-1ubuntu1 Jun 16, 2025
xvfb · Ubuntu 26.04.1 LTS (resolute) 2:21.1.18-1ubuntu1 xvfb 2:21.1.18-1ubuntu1 Jun 16, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.