SUSE-SU-2025:01981-1

CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).
CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP7 / xorg-x11-server

Package

Name: xorg-x11-server
Purl: pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.1.15-150700.5.3.1

Ecosystem specific

{
    "binaries": [
        {
            "xorg-x11-server-Xvfb": "21.1.15-150700.5.3.1",
            "xorg-x11-server-extra": "21.1.15-150700.5.3.1",
            "xorg-x11-server": "21.1.15-150700.5.3.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP7 / xorg-x11-server

Package

Name: xorg-x11-server
Purl: pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.1.15-150700.5.3.1

Ecosystem specific

{
    "binaries": [
        {
            "xorg-x11-server-sdk": "21.1.15-150700.5.3.1"
        }
    ]
}