Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-49177

Fixed in a distro release EPSS <1%CVSS 6.1

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.

Published 2025-06-17 · CVE record · OSV

Products: X.Org xwayland, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

Distro releases

ReleasePackageFixed in
AlmaLinux 10xorg-x11-server-Xwayland24.1.5-4.el10_0
AlmaLinux 10xorg-x11-server-Xwayland-devel24.1.5-4.el10_0
Amazon Linux 2023tigervnc1.14.1-3.amzn2023.0.2
Amazon Linux 2023tigervnc-icons1.14.1-3.amzn2023.0.2
Amazon Linux 2023tigervnc-license1.14.1-3.amzn2023.0.2
Amazon Linux 2023tigervnc-selinux1.14.1-3.amzn2023.0.2
Amazon Linux 2023tigervnc-server1.14.1-3.amzn2023.0.2
Amazon Linux 2023tigervnc-server-minimal1.14.1-3.amzn2023.0.2
Amazon Linux 2023tigervnc-server-module1.14.1-3.amzn2023.0.2
Amazon Linux 2023xorg-x11-server-Xephyr21.1.13-5.amzn2023.0.6
Amazon Linux 2023xorg-x11-server-Xnest21.1.13-5.amzn2023.0.6
Amazon Linux 2023xorg-x11-server-Xorg21.1.13-5.amzn2023.0.6
Amazon Linux 2023xorg-x11-server-Xvfb21.1.13-5.amzn2023.0.6
Amazon Linux 2023xorg-x11-server-Xwayland24.1.3-1.amzn2023.0.2
Amazon Linux 2023xorg-x11-server-Xwayland-devel24.1.3-1.amzn2023.0.2
Amazon Linux 2023xorg-x11-server-common21.1.13-5.amzn2023.0.6
Amazon Linux 2023xorg-x11-server-devel21.1.13-5.amzn2023.0.6
Amazon Linux 2023xorg-x11-server-source21.1.13-5.amzn2023.0.6
Debian 12xorg-server2:21.1.7-3+deb12u10
Debian 12xwaylandno fix
Debian 13xorg-server2:21.1.16-1.2
Debian 13xwaylandno fix
Debian 14xorg-server2:21.1.16-1.2
Debian 14xwayland2:24.1.8-1
Red Hat Enterprise Linux 10.0xorg-x11-server-Xwayland0:24.1.5-4.el10_0
Red Hat Enterprise Linux 10.0xorg-x11-server-Xwayland-debuginfo0:24.1.5-4.el10_0
Red Hat Enterprise Linux 10.0xorg-x11-server-Xwayland-debugsource0:24.1.5-4.el10_0
Red Hat Enterprise Linux 10.0xorg-x11-server-Xwayland-devel0:24.1.5-4.el10_0
Red Hat Enterprise Linux 9xorg-x11-server0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xdmx0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xdmx-debuginfo0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xephyr0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xephyr-debuginfo0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xnest0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xnest-debuginfo0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xorg0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xorg-debuginfo0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xvfb0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xvfb-debuginfo0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xwayland0:23.2.7-4.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xwayland-debuginfo0:23.2.7-4.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xwayland-debugsource0:23.2.7-4.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-Xwayland-devel0:23.2.7-4.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-common0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-debuginfo0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-debugsource0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-devel0:1.20.11-31.el9_6
Red Hat Enterprise Linux 9xorg-x11-server-source0:1.20.11-31.el9_6
Red Hat rhel eus 9.4xorg-x11-server-Xwayland0:22.1.9-6.el9_4
Red Hat rhel eus 9.4xorg-x11-server-Xwayland-debuginfo0:22.1.9-6.el9_4
Red Hat rhel eus 9.4xorg-x11-server-Xwayland-debugsource0:22.1.9-6.el9_4
Rocky Linux 10xorg-x11-server-Xwayland0:24.1.5-4.el10_0
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSxorg-x11-server21.1.4-150500.7.35.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSxorg-x11-server21.1.4-150500.7.35.1
SUSE Linux Enterprise Module for Basesystem 15 SP6xorg-x11-server21.1.11-150600.5.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP7xorg-x11-server21.1.15-150700.5.3.1
SUSE Linux Enterprise Module for Development Tools 15 SP6xorg-x11-server21.1.11-150600.5.12.1
SUSE Linux Enterprise Module for Development Tools 15 SP7xorg-x11-server21.1.15-150700.5.3.1
SUSE Linux Enterprise Server 15 SP5-LTSSxorg-x11-server21.1.4-150500.7.35.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5xorg-x11-server21.1.4-150500.7.35.1
SUSE Linux Enterprise Workstation Extension 15 SP6xwayland24.1.1-150600.5.12.1
SUSE Linux Enterprise Workstation Extension 15 SP7xwayland24.1.5-150700.3.3.1
Ubuntu 22.04 LTSxorg-server2:21.1.4-2ubuntu1.7~22.04.15
Ubuntu 22.04 LTSxwayland2:22.1.1-1ubuntu0.19
Ubuntu 24.04 LTSxorg-server2:21.1.12-1ubuntu1.4
Ubuntu 24.04 LTSxwayland2:23.2.6-1ubuntu0.6
Ubuntu 25.10xorg-server2:21.1.18-1ubuntu1
Ubuntu 25.10xwayland2:24.1.6-1ubuntu1
Ubuntu 26.04 LTSxorg-server2:21.1.18-1ubuntu1
Ubuntu 26.04 LTSxwayland2:24.1.6-1ubuntu1
Ubuntu Pro 14.04 LTSxorg-serverno fix
Ubuntu Pro 16.04 LTSxorg-serverno fix
Ubuntu Pro 16.04 LTSxorg-server-hwe-16.04no fix
Ubuntu Pro 18.04 LTSxorg-serverno fix
Ubuntu Pro 18.04 LTSxorg-server-hwe-18.04no fix
Ubuntu Pro 20.04 LTSxorg-serverno fix
openSUSE Leap 15.6xorg-x11-server21.1.11-150600.5.12.1
openSUSE Leap 15.6xwayland24.1.1-150600.5.12.1
openSUSE Tumbleweedxorg-x11-server21.1.15-6.1
openSUSE Tumbleweedxwayland24.1.8-1.1