Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-49176 (GCVE-0-2025-49176)
Vulnerability from cvelistv5 – Published: 2025-06-17 14:49 – Updated: 2025-12-11 15:34
VLAI
EPSS
Title
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
Summary
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
35 references
Impacted products
47 products
| Vendor | Product | Version | |
|---|---|---|---|
| X.Org | xwayland |
Affected:
0 , < 24.1.7
(semver)
|
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:24.1.5-4.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION |
Unaffected:
0:1.1.0-25.el6_10.1 , < *
(rpm)
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux 7.7 Advanced Update Support |
Unaffected:
0:1.8.0-17.el7_7.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:7.7::server |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.20.4-32.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.8.0-36.el7_9.2 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:1.20.11-26.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::crb cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:21.1.3-18.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::crb cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:1.15.0-7.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
0:1.9.0-15.el8_2.14 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
0:1.20.6-4.el8_2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:1.20.10-2.el8_4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:1.11.0-8.el8_4.13 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.20.10-2.el8_4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.11.0-8.el8_4.13 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:1.12.0-6.el8_6.14 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:21.1.3-2.el8_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:1.20.11-5.el8_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.12.0-6.el8_6.14 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
0:21.1.3-2.el8_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:1.12.0-6.el8_6.14 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:21.1.3-2.el8_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:1.20.11-5.el8_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:1.12.0-6.el8_6.14 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-2.el8_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-5.el8_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.20.11-16.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On |
Unaffected:
0:21.1.3-11.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:1.20.11-16.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:1.12.0-15.el8_8.14 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:21.1.3-11.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-16.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:1.12.0-15.el8_8.14 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-11.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.20.11-31.el9_6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:23.2.7-4.el9_6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.14.1-8.el9_6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-3.el9_0 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-11.el9_0 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:1.11.0-22.el9_0.15 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-8.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-18.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.12.0-14.el9_2.12 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:22.1.9-6.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:1.20.11-26.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:1.13.1-8.el9_4.7 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
Date Public
2025-06-17 00:00
Credits
Red Hat would like to thank Julian Suleder and Nils Emmerich for reporting this issue.
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-49176",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-06-17T14:58:49.779795Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-17T14:59:07.660Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-03T20:05:11.348Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2025/06/18/2"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://gitlab.freedesktop.org/xorg/xserver",
"defaultStatus": "unaffected",
"packageName": "xwayland",
"product": "xwayland",
"vendor": "X.Org",
"versions": [
{
"lessThan": "24.1.7",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.0"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:24.1.5-4.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.0-25.el6_10.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:7.7::server"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 7.7 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.8.0-17.el7_7.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.4-32.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.8.0-36.el7_9.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb",
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-26.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb",
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-18.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.15.0-7.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.2::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.9.0-15.el8_2.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.2::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.6-4.el8_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.10-2.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.11.0-8.el8_4.13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.10-2.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.11.0-8.el8_4.13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-6.el8_6.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-5.el8_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-6.el8_6.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-6.el8_6.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-5.el8_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-6.el8_6.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-5.el8_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-16.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-11.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-16.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-15.el8_8.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-11.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-16.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-15.el8_8.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-11.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-31.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:23.2.7-4.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.14.1-8.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-3.el9_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-11.el9_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.11.0-22.el9_0.15",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-8.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-18.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-14.el9_2.12",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:22.1.9-6.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream",
"cpe:/a:redhat:rhel_eus:9.4::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-26.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.13.1-8.el9_4.7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Julian Suleder and Nils Emmerich for reporting this issue."
}
],
"datePublic": "2025-06-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-11T15:34:07.129Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2025:10258",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10258"
},
{
"name": "RHSA-2025:10342",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10342"
},
{
"name": "RHSA-2025:10343",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10343"
},
{
"name": "RHSA-2025:10344",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10344"
},
{
"name": "RHSA-2025:10346",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10346"
},
{
"name": "RHSA-2025:10347",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10347"
},
{
"name": "RHSA-2025:10348",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10348"
},
{
"name": "RHSA-2025:10349",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10349"
},
{
"name": "RHSA-2025:10350",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10350"
},
{
"name": "RHSA-2025:10351",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10351"
},
{
"name": "RHSA-2025:10352",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10352"
},
{
"name": "RHSA-2025:10355",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10355"
},
{
"name": "RHSA-2025:10356",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10356"
},
{
"name": "RHSA-2025:10360",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10360"
},
{
"name": "RHSA-2025:10370",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10370"
},
{
"name": "RHSA-2025:10374",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10374"
},
{
"name": "RHSA-2025:10375",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10375"
},
{
"name": "RHSA-2025:10376",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10376"
},
{
"name": "RHSA-2025:10377",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10377"
},
{
"name": "RHSA-2025:10378",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10378"
},
{
"name": "RHSA-2025:10381",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10381"
},
{
"name": "RHSA-2025:10410",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:10410"
},
{
"name": "RHSA-2025:9303",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:9303"
},
{
"name": "RHSA-2025:9304",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:9304"
},
{
"name": "RHSA-2025:9305",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:9305"
},
{
"name": "RHSA-2025:9306",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:9306"
},
{
"name": "RHSA-2025:9392",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:9392"
},
{
"name": "RHSA-2025:9964",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:9964"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2025-49176"
},
{
"name": "RHBZ#2369954",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369954"
},
{
"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9"
},
{
"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1"
},
{
"url": "https://www.x.org/wiki/Development/Security/"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-06-03T07:10:25.307Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2025-06-17T00:00:00.000Z",
"value": "Made public."
}
],
"title": "Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_redhatCweChain": "CWE-190: Integer Overflow or Wraparound"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2025-49176",
"datePublished": "2025-06-17T14:49:49.143Z",
"dateReserved": "2025-06-03T05:38:02.947Z",
"dateUpdated": "2025-12-11T15:34:07.129Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-49176",
"date": "2026-06-04",
"epss": "0.00267",
"percentile": "0.50353"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-49176\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2025-06-17T15:15:45.470\",\"lastModified\":\"2025-12-11T13:15:59.340\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.\"},{\"lang\":\"es\",\"value\":\"Se detect\u00f3 una falla en la extensi\u00f3n Big Requests. La longitud de la solicitud se multiplica por 4 antes de compararla con el tama\u00f1o m\u00e1ximo permitido, lo que podr\u00eda causar un desbordamiento de enteros y omitir la comprobaci\u00f3n de tama\u00f1o.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.5}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10258\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10342\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10343\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10344\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10346\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10347\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10348\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10349\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10350\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10351\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10352\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10355\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10356\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10360\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10370\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10374\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10375\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10376\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10377\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10378\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10381\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:10410\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:9303\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:9304\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:9305\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:9306\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:9392\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:9964\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-49176\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2369954\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.x.org/wiki/Development/Security/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2025/06/18/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2025/06/18/2\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T20:05:11.348Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-49176\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-17T14:58:49.779795Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-17T14:58:52.444Z\"}}], \"cna\": {\"title\": \"Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Julian Suleder and Nils Emmerich for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.3, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"vendor\": \"X.Org\", \"product\": \"xwayland\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"24.1.7\", \"versionType\": \"semver\"}], \"packageName\": \"xwayland\", \"collectionURL\": \"https://gitlab.freedesktop.org/xorg/xserver\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.5-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.0-25.el6_10.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:7.7::server\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7.7 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.8.0-17.el7_7.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.4-32.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.8.0-36.el7_9.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\", \"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-26.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\", \"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-18.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-7.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.9.0-15.el8_2.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.6-4.el8_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.10-2.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-8.el8_4.13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.10-2.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-8.el8_4.13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-6.el8_6.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-5.el8_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-6.el8_6.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-6.el8_6.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-5.el8_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-6.el8_6.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-5.el8_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-16.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-11.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-16.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-15.el8_8.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-11.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-16.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-15.el8_8.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-11.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-31.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.2.7-4.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.14.1-8.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-3.el9_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-11.el9_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-22.el9_0.15\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-8.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-18.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-14.el9_2.12\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:22.1.9-6.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-26.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.13.1-8.el9_4.7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-06-03T07:10:25.307Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2025-06-17T00:00:00.000Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2025-06-17T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2025:10258\", \"name\": \"RHSA-2025:10258\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10342\", \"name\": \"RHSA-2025:10342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10343\", \"name\": \"RHSA-2025:10343\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10344\", \"name\": \"RHSA-2025:10344\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10346\", \"name\": \"RHSA-2025:10346\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10347\", \"name\": \"RHSA-2025:10347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10348\", \"name\": \"RHSA-2025:10348\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10349\", \"name\": \"RHSA-2025:10349\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10350\", \"name\": \"RHSA-2025:10350\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10351\", \"name\": \"RHSA-2025:10351\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10352\", \"name\": \"RHSA-2025:10352\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10355\", \"name\": \"RHSA-2025:10355\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10356\", \"name\": \"RHSA-2025:10356\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10360\", \"name\": \"RHSA-2025:10360\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10370\", \"name\": \"RHSA-2025:10370\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10374\", \"name\": \"RHSA-2025:10374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10375\", \"name\": \"RHSA-2025:10375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10376\", \"name\": \"RHSA-2025:10376\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10377\", \"name\": \"RHSA-2025:10377\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10378\", \"name\": \"RHSA-2025:10378\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10381\", \"name\": \"RHSA-2025:10381\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:10410\", \"name\": \"RHSA-2025:10410\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:9303\", \"name\": \"RHSA-2025:9303\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:9304\", \"name\": \"RHSA-2025:9304\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:9305\", \"name\": \"RHSA-2025:9305\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:9306\", \"name\": \"RHSA-2025:9306\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:9392\", \"name\": \"RHSA-2025:9392\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:9964\", \"name\": \"RHSA-2025:9964\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2025-49176\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2369954\", \"name\": \"RHBZ#2369954\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9\"}, {\"url\": \"https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1\"}, {\"url\": \"https://www.x.org/wiki/Development/Security/\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-190\", \"description\": \"Integer Overflow or Wraparound\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2025-12-11T15:34:07.129Z\"}, \"x_redhatCweChain\": \"CWE-190: Integer Overflow or Wraparound\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-49176\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-12-11T15:34:07.129Z\", \"dateReserved\": \"2025-06-03T05:38:02.947Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2025-06-17T14:49:49.143Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2025:01975-1
Vulnerability from csaf_suse - Published: 2025-06-17 15:28 - Updated: 2025-06-17 15:28Summary
Security update for xwayland
Severity
Important
Notes
Title of the patch: Security update for xwayland
Description of the patch: This update for xwayland fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082)
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084)
- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085)
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087)
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089)
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090)
Patchnames: SUSE-2025-1975,SUSE-SLE-Product-WE-15-SP7-2025-1975
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xwayland",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xwayland fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082)\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084)\n- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085)\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087)\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089)\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1975,SUSE-SLE-Product-WE-15-SP7-2025-1975",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01975-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01975-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501975-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01975-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040330.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244085",
"url": "https://bugzilla.suse.com/1244085"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49177 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xwayland",
"tracking": {
"current_release_date": "2025-06-17T15:28:52Z",
"generator": {
"date": "2025-06-17T15:28:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01975-1",
"initial_release_date": "2025-06-17T15:28:52Z",
"revision_history": [
{
"date": "2025-06-17T15:28:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.3.1.aarch64",
"product": {
"name": "xwayland-24.1.5-150700.3.3.1.aarch64",
"product_id": "xwayland-24.1.5-150700.3.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.3.1.aarch64",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.3.1.aarch64",
"product_id": "xwayland-devel-24.1.5-150700.3.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.3.1.i586",
"product": {
"name": "xwayland-24.1.5-150700.3.3.1.i586",
"product_id": "xwayland-24.1.5-150700.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.3.1.i586",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.3.1.i586",
"product_id": "xwayland-devel-24.1.5-150700.3.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.3.1.ppc64le",
"product": {
"name": "xwayland-24.1.5-150700.3.3.1.ppc64le",
"product_id": "xwayland-24.1.5-150700.3.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.3.1.ppc64le",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.3.1.ppc64le",
"product_id": "xwayland-devel-24.1.5-150700.3.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.3.1.s390x",
"product": {
"name": "xwayland-24.1.5-150700.3.3.1.s390x",
"product_id": "xwayland-24.1.5-150700.3.3.1.s390x"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.3.1.s390x",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.3.1.s390x",
"product_id": "xwayland-devel-24.1.5-150700.3.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.3.1.x86_64",
"product": {
"name": "xwayland-24.1.5-150700.3.3.1.x86_64",
"product_id": "xwayland-24.1.5-150700.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.3.1.x86_64",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.3.1.x86_64",
"product_id": "xwayland-devel-24.1.5-150700.3.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.5-150700.3.3.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
},
"product_reference": "xwayland-24.1.5-150700.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:28:52Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:28:52Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49177"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49177",
"url": "https://www.suse.com/security/cve/CVE-2025-49177"
},
{
"category": "external",
"summary": "SUSE Bug 1244085 for CVE-2025-49177",
"url": "https://bugzilla.suse.com/1244085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:28:52Z",
"details": "moderate"
}
],
"title": "CVE-2025-49177"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:28:52Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:28:52Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:28:52Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:01977-1
Vulnerability from csaf_suse - Published: 2025-06-17 15:29 - Updated: 2025-06-17 15:29Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).
Patchnames: SUSE-2025-1977,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1977,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1977,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1977,SUSE-SLE-Product-WE-15-SP6-2025-1977,SUSE-SLE-Product-WE-15-SP7-2025-1977,SUSE-Storage-7.1-2025-1977
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1977,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1977,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1977,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1977,SUSE-SLE-Product-WE-15-SP6-2025-1977,SUSE-SLE-Product-WE-15-SP7-2025-1977,SUSE-Storage-7.1-2025-1977",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01977-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01977-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501977-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01977-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040329.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-06-17T15:29:23Z",
"generator": {
"date": "2025-06-17T15:29:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01977-1",
"initial_release_date": "2025-06-17T15:29:23Z",
"revision_history": [
{
"date": "2025-06-17T15:29:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"product": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"product_id": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"product_id": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"product_id": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.aarch64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.aarch64",
"product_id": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.aarch64",
"product": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.aarch64",
"product_id": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.i586",
"product": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.i586",
"product_id": "xorg-x11-server-1.20.3-150200.22.5.105.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.i586",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.i586",
"product_id": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.i586",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.i586",
"product_id": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.i586",
"product": {
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.i586",
"product_id": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.i586",
"product": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.i586",
"product_id": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"product": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"product_id": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"product_id": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"product_id": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.ppc64le",
"product_id": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.ppc64le",
"product": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.ppc64le",
"product_id": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"product": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"product_id": "xorg-x11-server-1.20.3-150200.22.5.105.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"product_id": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"product_id": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.s390x",
"product": {
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.s390x",
"product_id": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.s390x",
"product": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.s390x",
"product_id": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"product": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"product_id": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"product_id": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"product_id": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.x86_64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.x86_64",
"product_id": "xorg-x11-server-source-1.20.3-150200.22.5.105.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"product": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"product_id": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:23Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:23Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:23Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:23Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Enterprise Storage 7.1:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-extra-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:xorg-x11-server-sdk-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP6:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 15 SP7:xorg-x11-server-wayland-1.20.3-150200.22.5.105.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:23Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:01978-1
Vulnerability from csaf_suse - Published: 2025-06-17 15:29 - Updated: 2025-06-17 15:29Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).
Patchnames: SUSE-2025-1978,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1978,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1978,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1978,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1978,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1978,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1978
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1978,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1978,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1978,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1978,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1978,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1978,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1978",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01978-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01978-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501978-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01978-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040328.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-06-17T15:29:54Z",
"generator": {
"date": "2025-06-17T15:29:54Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01978-1",
"initial_release_date": "2025-06-17T15:29:54Z",
"revision_history": [
{
"date": "2025-06-17T15:29:54Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"product_id": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.aarch64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.aarch64",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.57.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.57.1.i586",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.i586",
"product_id": "xorg-x11-server-1.20.3-150400.38.57.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.i586",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.i586",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.57.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.i586",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.i586",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.i586",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.i586",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.57.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"product_id": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.ppc64le",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.57.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"product_id": "xorg-x11-server-1.20.3-150400.38.57.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.s390x",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.s390x",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.57.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"product_id": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.x86_64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.57.1.x86_64",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.57.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:54Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:54Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:54Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:54Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.57.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.57.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:29:54Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:01979-1
Vulnerability from csaf_suse - Published: 2025-06-17 15:30 - Updated: 2025-06-17 15:30Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).
Patchnames: SUSE-2025-1979,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1979,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1979,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1979,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1979
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).\n- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1979,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1979,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1979,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1979,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1979",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01979-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01979-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501979-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01979-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040327.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244085",
"url": "https://bugzilla.suse.com/1244085"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49177 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-06-17T15:30:13Z",
"generator": {
"date": "2025-06-17T15:30:13Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01979-1",
"initial_release_date": "2025-06-17T15:30:13Z",
"revision_history": [
{
"date": "2025-06-17T15:30:13Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"product_id": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.aarch64",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.aarch64",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.35.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.35.1.i586",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.i586",
"product_id": "xorg-x11-server-21.1.4-150500.7.35.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.i586",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.i586",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.i586",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.i586",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.35.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.i586",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.i586",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.i586",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.i586",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.35.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"product_id": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.ppc64le",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.35.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"product_id": "xorg-x11-server-21.1.4-150500.7.35.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.s390x",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.s390x",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.35.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"product_id": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.x86_64",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.35.1.x86_64",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.35.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:13Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:13Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49177"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49177",
"url": "https://www.suse.com/security/cve/CVE-2025-49177"
},
{
"category": "external",
"summary": "SUSE Bug 1244085 for CVE-2025-49177",
"url": "https://bugzilla.suse.com/1244085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:13Z",
"details": "moderate"
}
],
"title": "CVE-2025-49177"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:13Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:13Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.35.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:13Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:01980-1
Vulnerability from csaf_suse - Published: 2025-06-17 15:30 - Updated: 2025-06-17 15:30Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).
Patchnames: SUSE-2025-1980,SUSE-SLE-Module-Basesystem-15-SP6-2025-1980,SUSE-SLE-Module-Development-Tools-15-SP6-2025-1980,openSUSE-SLE-15.6-2025-1980
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).\n- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1980,SUSE-SLE-Module-Basesystem-15-SP6-2025-1980,SUSE-SLE-Module-Development-Tools-15-SP6-2025-1980,openSUSE-SLE-15.6-2025-1980",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01980-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01980-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501980-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01980-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040326.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244085",
"url": "https://bugzilla.suse.com/1244085"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49177 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-06-17T15:30:27Z",
"generator": {
"date": "2025-06-17T15:30:27Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01980-1",
"initial_release_date": "2025-06-17T15:30:27Z",
"revision_history": [
{
"date": "2025-06-17T15:30:27Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"product_id": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.12.1.i586",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.i586",
"product_id": "xorg-x11-server-21.1.11-150600.5.12.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.i586",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.i586",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.i586",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.i586",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.12.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.i586",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.i586",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.i586",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.i586",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.12.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"product_id": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"product_id": "xorg-x11-server-21.1.11-150600.5.12.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.12.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"product_id": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:27Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:27Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49177"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49177",
"url": "https://www.suse.com/security/cve/CVE-2025-49177"
},
{
"category": "external",
"summary": "SUSE Bug 1244085 for CVE-2025-49177",
"url": "https://bugzilla.suse.com/1244085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:27Z",
"details": "moderate"
}
],
"title": "CVE-2025-49177"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:27Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:27Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.12.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:27Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:01981-1
Vulnerability from csaf_suse - Published: 2025-06-17 15:30 - Updated: 2025-06-17 15:30Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).
Patchnames: SUSE-2025-1981,SUSE-SLE-Module-Basesystem-15-SP7-2025-1981,SUSE-SLE-Module-Development-Tools-15-SP7-2025-1981
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).\n- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085).\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1981,SUSE-SLE-Module-Basesystem-15-SP7-2025-1981,SUSE-SLE-Module-Development-Tools-15-SP7-2025-1981",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01981-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01981-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501981-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01981-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040325.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244085",
"url": "https://bugzilla.suse.com/1244085"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49177 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-06-17T15:30:54Z",
"generator": {
"date": "2025-06-17T15:30:54Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01981-1",
"initial_release_date": "2025-06-17T15:30:54Z",
"revision_history": [
{
"date": "2025-06-17T15:30:54Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"product_id": "xorg-x11-server-21.1.15-150700.5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.aarch64",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.aarch64",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.3.1.i586",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.i586",
"product_id": "xorg-x11-server-21.1.15-150700.5.3.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.i586",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.i586",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.i586",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.i586",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.3.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.i586",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.i586",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.i586",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.i586",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"product_id": "xorg-x11-server-21.1.15-150700.5.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.ppc64le",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"product_id": "xorg-x11-server-21.1.15-150700.5.3.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.s390x",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.s390x",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"product_id": "xorg-x11-server-21.1.15-150700.5.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.x86_64",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.3.1.x86_64",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:54Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:54Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49177"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49177",
"url": "https://www.suse.com/security/cve/CVE-2025-49177"
},
{
"category": "external",
"summary": "SUSE Bug 1244085 for CVE-2025-49177",
"url": "https://bugzilla.suse.com/1244085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:54Z",
"details": "moderate"
}
],
"title": "CVE-2025-49177"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:54Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:54Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.3.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-17T15:30:54Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:02012-1
Vulnerability from csaf_suse - Published: 2025-06-18 15:36 - Updated: 2025-06-18 15:36Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).
Patchnames: SUSE-2025-2012,SUSE-SLE-SERVER-12-SP5-LTSS-2025-2012,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2012
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082).\n- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084).\n- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087).\n- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089).\n- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-2012,SUSE-SLE-SERVER-12-SP5-LTSS-2025-2012,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2012",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02012-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:02012-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502012-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:02012-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040365.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244082",
"url": "https://bugzilla.suse.com/1244082"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE Bug 1244087",
"url": "https://bugzilla.suse.com/1244087"
},
{
"category": "self",
"summary": "SUSE Bug 1244089",
"url": "https://bugzilla.suse.com/1244089"
},
{
"category": "self",
"summary": "SUSE Bug 1244090",
"url": "https://bugzilla.suse.com/1244090"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49175 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49178 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49179 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49180 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49180/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-06-18T15:36:17Z",
"generator": {
"date": "2025-06-18T15:36:17Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:02012-1",
"initial_release_date": "2025-06-18T15:36:17Z",
"revision_history": [
{
"date": "2025-06-18T15:36:17Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.83.1.aarch64",
"product": {
"name": "xorg-x11-server-1.19.6-10.83.1.aarch64",
"product_id": "xorg-x11-server-1.19.6-10.83.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"product_id": "xorg-x11-server-extra-1.19.6-10.83.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.aarch64",
"product_id": "xorg-x11-server-sdk-1.19.6-10.83.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.83.1.aarch64",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.83.1.aarch64",
"product_id": "xorg-x11-server-source-1.19.6-10.83.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.83.1.i586",
"product": {
"name": "xorg-x11-server-1.19.6-10.83.1.i586",
"product_id": "xorg-x11-server-1.19.6-10.83.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.83.1.i586",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.i586",
"product_id": "xorg-x11-server-extra-1.19.6-10.83.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.i586",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.i586",
"product_id": "xorg-x11-server-sdk-1.19.6-10.83.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.83.1.i586",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.83.1.i586",
"product_id": "xorg-x11-server-source-1.19.6-10.83.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.83.1.ppc64le",
"product": {
"name": "xorg-x11-server-1.19.6-10.83.1.ppc64le",
"product_id": "xorg-x11-server-1.19.6-10.83.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"product_id": "xorg-x11-server-extra-1.19.6-10.83.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.ppc64le",
"product_id": "xorg-x11-server-sdk-1.19.6-10.83.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.83.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.83.1.ppc64le",
"product_id": "xorg-x11-server-source-1.19.6-10.83.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.83.1.s390",
"product": {
"name": "xorg-x11-server-1.19.6-10.83.1.s390",
"product_id": "xorg-x11-server-1.19.6-10.83.1.s390"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.83.1.s390",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.s390",
"product_id": "xorg-x11-server-extra-1.19.6-10.83.1.s390"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.s390",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.s390",
"product_id": "xorg-x11-server-sdk-1.19.6-10.83.1.s390"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.83.1.s390",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.83.1.s390",
"product_id": "xorg-x11-server-source-1.19.6-10.83.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.83.1.s390x",
"product": {
"name": "xorg-x11-server-1.19.6-10.83.1.s390x",
"product_id": "xorg-x11-server-1.19.6-10.83.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"product_id": "xorg-x11-server-extra-1.19.6-10.83.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.s390x",
"product_id": "xorg-x11-server-sdk-1.19.6-10.83.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.83.1.s390x",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.83.1.s390x",
"product_id": "xorg-x11-server-source-1.19.6-10.83.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.83.1.x86_64",
"product": {
"name": "xorg-x11-server-1.19.6-10.83.1.x86_64",
"product_id": "xorg-x11-server-1.19.6-10.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"product_id": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.83.1.x86_64",
"product_id": "xorg-x11-server-sdk-1.19.6-10.83.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.83.1.x86_64",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.83.1.x86_64",
"product_id": "xorg-x11-server-source-1.19.6-10.83.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.83.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64"
},
"product_reference": "xorg-x11-server-1.19.6-10.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.83.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.19.6-10.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.83.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x"
},
"product_reference": "xorg-x11-server-1.19.6-10.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.83.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64"
},
"product_reference": "xorg-x11-server-1.19.6-10.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.83.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64"
},
"product_reference": "xorg-x11-server-1.19.6-10.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49175"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Rendering extension\u0027s handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49175",
"url": "https://www.suse.com/security/cve/CVE-2025-49175"
},
{
"category": "external",
"summary": "SUSE Bug 1244082 for CVE-2025-49175",
"url": "https://bugzilla.suse.com/1244082"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-18T15:36:17Z",
"details": "important"
}
],
"title": "CVE-2025-49175"
},
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-18T15:36:17Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
},
{
"cve": "CVE-2025-49178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49178"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X server\u0027s request handling. Non-zero \u0027bytes to ignore\u0027 in a client\u0027s request can cause the server to skip processing another client\u0027s request, potentially leading to a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49178",
"url": "https://www.suse.com/security/cve/CVE-2025-49178"
},
{
"category": "external",
"summary": "SUSE Bug 1244087 for CVE-2025-49178",
"url": "https://bugzilla.suse.com/1244087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-18T15:36:17Z",
"details": "moderate"
}
],
"title": "CVE-2025-49178"
},
{
"cve": "CVE-2025-49179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49179"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49179",
"url": "https://www.suse.com/security/cve/CVE-2025-49179"
},
{
"category": "external",
"summary": "SUSE Bug 1244089 for CVE-2025-49179",
"url": "https://bugzilla.suse.com/1244089"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-18T15:36:17Z",
"details": "important"
}
],
"title": "CVE-2025-49179"
},
{
"cve": "CVE-2025-49180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49180"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49180",
"url": "https://www.suse.com/security/cve/CVE-2025-49180"
},
{
"category": "external",
"summary": "SUSE Bug 1244090 for CVE-2025-49180",
"url": "https://bugzilla.suse.com/1244090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.83.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.83.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-18T15:36:17Z",
"details": "important"
}
],
"title": "CVE-2025-49180"
}
]
}
SUSE-SU-2025:02187-1
Vulnerability from csaf_suse - Published: 2025-07-01 11:48 - Updated: 2025-07-01 11:48Summary
Security update for xwayland
Severity
Important
Notes
Title of the patch: Security update for xwayland
Description of the patch: This update for xwayland fixes the following issues:
- CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
Patchnames: SUSE-2025-2187,SUSE-SLE-Product-WE-15-SP7-2025-2187
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xwayland",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xwayland fixes the following issues:\n\n- CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-2187,SUSE-SLE-Product-WE-15-SP7-2025-2187",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02187-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:02187-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502187-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:02187-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040572.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
}
],
"title": "Security update for xwayland",
"tracking": {
"current_release_date": "2025-07-01T11:48:12Z",
"generator": {
"date": "2025-07-01T11:48:12Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:02187-1",
"initial_release_date": "2025-07-01T11:48:12Z",
"revision_history": [
{
"date": "2025-07-01T11:48:12Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.6.1.aarch64",
"product": {
"name": "xwayland-24.1.5-150700.3.6.1.aarch64",
"product_id": "xwayland-24.1.5-150700.3.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.6.1.aarch64",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.6.1.aarch64",
"product_id": "xwayland-devel-24.1.5-150700.3.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.6.1.i586",
"product": {
"name": "xwayland-24.1.5-150700.3.6.1.i586",
"product_id": "xwayland-24.1.5-150700.3.6.1.i586"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.6.1.i586",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.6.1.i586",
"product_id": "xwayland-devel-24.1.5-150700.3.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.6.1.ppc64le",
"product": {
"name": "xwayland-24.1.5-150700.3.6.1.ppc64le",
"product_id": "xwayland-24.1.5-150700.3.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.6.1.ppc64le",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.6.1.ppc64le",
"product_id": "xwayland-devel-24.1.5-150700.3.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.6.1.s390x",
"product": {
"name": "xwayland-24.1.5-150700.3.6.1.s390x",
"product_id": "xwayland-24.1.5-150700.3.6.1.s390x"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.6.1.s390x",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.6.1.s390x",
"product_id": "xwayland-devel-24.1.5-150700.3.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.6.1.x86_64",
"product": {
"name": "xwayland-24.1.5-150700.3.6.1.x86_64",
"product_id": "xwayland-24.1.5-150700.3.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.6.1.x86_64",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.6.1.x86_64",
"product_id": "xwayland-devel-24.1.5-150700.3.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.5-150700.3.6.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.6.1.x86_64"
},
"product_reference": "xwayland-24.1.5-150700.3.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-01T11:48:12Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
}
]
}
SUSE-SU-2025:02191-1
Vulnerability from csaf_suse - Published: 2025-07-01 15:06 - Updated: 2025-07-01 15:06Summary
Security update for xwayland
Severity
Important
Notes
Title of the patch: Security update for xwayland
Description of the patch: This update for xwayland fixes the following issues:
- CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
Patchnames: SUSE-2025-2191,SUSE-SLE-Product-WE-15-SP6-2025-2191,openSUSE-SLE-15.6-2025-2191
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP6:xwayland-24.1.1-150600.5.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xwayland",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xwayland fixes the following issues:\n\n- CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-2191,SUSE-SLE-Product-WE-15-SP6-2025-2191,openSUSE-SLE-15.6-2025-2191",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02191-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:02191-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502191-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:02191-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040579.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
}
],
"title": "Security update for xwayland",
"tracking": {
"current_release_date": "2025-07-01T15:06:49Z",
"generator": {
"date": "2025-07-01T15:06:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:02191-1",
"initial_release_date": "2025-07-01T15:06:49Z",
"revision_history": [
{
"date": "2025-07-01T15:06:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.15.1.aarch64",
"product": {
"name": "xwayland-24.1.1-150600.5.15.1.aarch64",
"product_id": "xwayland-24.1.1-150600.5.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.15.1.aarch64",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.aarch64",
"product_id": "xwayland-devel-24.1.1-150600.5.15.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.15.1.i586",
"product": {
"name": "xwayland-24.1.1-150600.5.15.1.i586",
"product_id": "xwayland-24.1.1-150600.5.15.1.i586"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.15.1.i586",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.i586",
"product_id": "xwayland-devel-24.1.1-150600.5.15.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.15.1.ppc64le",
"product": {
"name": "xwayland-24.1.1-150600.5.15.1.ppc64le",
"product_id": "xwayland-24.1.1-150600.5.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.15.1.ppc64le",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.ppc64le",
"product_id": "xwayland-devel-24.1.1-150600.5.15.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.15.1.s390x",
"product": {
"name": "xwayland-24.1.1-150600.5.15.1.s390x",
"product_id": "xwayland-24.1.1-150600.5.15.1.s390x"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.15.1.s390x",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.s390x",
"product_id": "xwayland-devel-24.1.1-150600.5.15.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.15.1.x86_64",
"product": {
"name": "xwayland-24.1.1-150600.5.15.1.x86_64",
"product_id": "xwayland-24.1.1-150600.5.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.15.1.x86_64",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.x86_64",
"product_id": "xwayland-devel-24.1.1-150600.5.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP6",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.15.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP6",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP6:xwayland-24.1.1-150600.5.15.1.x86_64"
},
"product_reference": "xwayland-24.1.1-150600.5.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.15.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.aarch64"
},
"product_reference": "xwayland-24.1.1-150600.5.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.15.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.ppc64le"
},
"product_reference": "xwayland-24.1.1-150600.5.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.15.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.s390x"
},
"product_reference": "xwayland-24.1.1-150600.5.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.15.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.x86_64"
},
"product_reference": "xwayland-24.1.1-150600.5.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.aarch64"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.ppc64le"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.s390x"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.15.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.x86_64"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP6:xwayland-24.1.1-150600.5.15.1.x86_64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP6:xwayland-24.1.1-150600.5.15.1.x86_64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP6:xwayland-24.1.1-150600.5.15.1.x86_64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.15.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-01T15:06:49Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
}
]
}
SUSE-SU-2025:02192-1
Vulnerability from csaf_suse - Published: 2025-07-01 15:07 - Updated: 2025-07-01 15:07Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
Patchnames: SUSE-2025-2192,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2192,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2192,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2192,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2192,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2192,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2192
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
38 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-2192,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2192,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2192,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2192,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2192,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2192,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2192",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02192-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:02192-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502192-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:02192-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040578.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244084",
"url": "https://bugzilla.suse.com/1244084"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49176 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49176/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2025-07-01T15:07:21Z",
"generator": {
"date": "2025-07-01T15:07:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:02192-1",
"initial_release_date": "2025-07-01T15:07:21Z",
"revision_history": [
{
"date": "2025-07-01T15:07:21Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"product_id": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.aarch64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.aarch64",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.60.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.60.1.i586",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.i586",
"product_id": "xorg-x11-server-1.20.3-150400.38.60.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.i586",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.i586",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.60.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.i586",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.i586",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.i586",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.i586",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.60.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"product_id": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.ppc64le",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.60.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"product_id": "xorg-x11-server-1.20.3-150400.38.60.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.s390x",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.s390x",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.60.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"product_id": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.x86_64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.60.1.x86_64",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.60.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.s390x"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.s390x"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-49176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49176"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49176",
"url": "https://www.suse.com/security/cve/CVE-2025-49176"
},
{
"category": "external",
"summary": "SUSE Bug 1244084 for CVE-2025-49176",
"url": "https://bugzilla.suse.com/1244084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Proxy 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-1.20.3-150400.38.60.1.x86_64",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.ppc64le",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.s390x",
"SUSE Manager Server 4.3:xorg-x11-server-extra-1.20.3-150400.38.60.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-01T15:07:21Z",
"details": "important"
}
],
"title": "CVE-2025-49176"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…