Back Linuxsecurity

openSUSE: xorg-x11-server Important DoS Issues 2025:3909

Linuxsecurity •LinuxSecurity Advisories • November 3, 2025

This update for xorg-x11-server fixes the following issues: * Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) * Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) * Fixed value overflow in Xkb extension XkbSetCompatMap() (CVE-2025-62231, bsc#1251960)

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-3909=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-3909=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-3909=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-3909=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-3909=1 * SUSE Manager Proxy 4.3 LTS zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-3909=1 * SUSE Manager Retail Branch Server 4.3 LTS zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-LTS-2025-3909=1 * SUSE Manager Server 4.3 LTS zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-3909=1

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-source-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-sdk-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-sdk-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-sdk-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-sdk-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-sdk-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Manager Proxy 4.3 LTS (x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Manager Retail Branch Server 4.3 LTS (x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1 * SUSE Manager Server 4.3 LTS (ppc64le s390x x86_64) * xorg-x11-server-1.20.3-150400.38.63.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.63.1 * xorg-x11-server-extra-1.20.3-150400.38.63.1 * xorg-x11-server-debugsource-1.20.3-150400.38.63.1

* bsc#1251958 * bsc#1251959 * bsc#1251960 ## References: * * * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Address Critical Vulnerabilities in xorg-x11-server SUSE and openSUSE have released important security updates for the xorg-x11-server to address multiple vulnerabilities. The updates fix a use-after-free issue in XPresentNotify structures (CVE-2025-62229), a use-after-free in Xkb client resource removal (CVE-2025-62230), and a value overflow in the Xkb extension XkbSetCompatMap() (CVE-2025-62231). Users are advised to apply the updates using recommended installation methods. 2 sources 30

Extracted Entities

openSUSE: xorg-x11-server Important DoS Issues 2025:3909

The full story

Extracted Entities

Attack Types (1)

CVEs (3)

Platforms (8)