Linux · Security advisory · May 16, 2025
ELSA-2025-7165: Security update for 2 packages
ELSA-2025-7165, released May 16, 2025, fixes 9 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0090
59th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 9
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| xorg-x11-server-Xwayland | ol 9 | 0:23.2.7-3.el9_6 |
| xorg-x11-server-Xwayland-devel | ol 9 | 0:23.2.7-3.el9_6 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2024-9632 | xnest: A flaw was found in the X.org server | 7.8 | 0.0090 | None reported | |
| High | CVE-2025-26597 | xnest: A buffer overflow flaw was found in X.Org and Xwayland | 7.8 | 0.0044 | None reported | |
| High | CVE-2025-26595 | xnest: A buffer overflow flaw was found in X.Org and Xwayland | 7.8 | 0.0044 | None reported | |
| High | CVE-2025-26596 | xnest: A heap overflow flaw was found in X.Org and Xwayland | 7.8 | 0.0044 | None reported | |
| High | CVE-2025-26598 | xnest: An out-of-bounds write flaw was found in X.Org and Xwayland | 7.8 | 0.0041 | None reported | |
| High | CVE-2025-26599 | xnest: An access to an uninitialized pointer flaw was found in X.Org and Xwayland.The function compCheckRedirect() may fail... | 7.8 | 0.0041 | None reported | |
| High | CVE-2025-26594 | xserver-xephyr: A use-after-free flaw was found in X.Org and Xwayland | 7.8 | 0.0039 | None reported | |
| High | CVE-2025-26600 | xorg-server-source: A use-after-free flaw was found in X.Org and Xwayland | 7.8 | 0.0039 | None reported | |
| High | CVE-2025-26601 | xnest: A use-after-free flaw was found in X.Org and Xwayland | 7.8 | 0.0039 | None reported |
Showing 1 to 9 of 9
1