Linux · Security advisory · March 10, 2025

RHSA-2025:2502: Security update for 7 packages

RHSA-2025:2502, released March 10, 2025, fixes 8 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0044
38th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
tigervncRHEL 80:1.13.1-15.el8_10
tigervnc-iconsRHEL 80:1.13.1-15.el8_10
tigervnc-licenseRHEL 80:1.13.1-15.el8_10
tigervnc-selinuxRHEL 80:1.13.1-15.el8_10
tigervnc-serverRHEL 80:1.13.1-15.el8_10
tigervnc-server-minimalRHEL 80:1.13.1-15.el8_10
tigervnc-server-moduleRHEL 80:1.13.1-15.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-26597 xnest: A buffer overflow flaw was found in X.Org and Xwayland 7.8 0.0044 None reported
High CVE-2025-26595 xnest: A buffer overflow flaw was found in X.Org and Xwayland 7.8 0.0044 None reported
High CVE-2025-26596 xnest: A heap overflow flaw was found in X.Org and Xwayland 7.8 0.0044 None reported
High CVE-2025-26598 xnest: An out-of-bounds write flaw was found in X.Org and Xwayland 7.8 0.0041 None reported
High CVE-2025-26599 xnest: An access to an uninitialized pointer flaw was found in X.Org and Xwayland.The function compCheckRedirect() may fail... 7.8 0.0041 None reported
High CVE-2025-26594 xserver-xephyr: A use-after-free flaw was found in X.Org and Xwayland 7.8 0.0039 None reported
High CVE-2025-26600 xorg-server-source: A use-after-free flaw was found in X.Org and Xwayland 7.8 0.0039 None reported
High CVE-2025-26601 xnest: A use-after-free flaw was found in X.Org and Xwayland 7.8 0.0039 None reported
Showing 1 to 8 of 8 1