[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 4353-1] xorg-server security update



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4353-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
October 29, 2025                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : xorg-server
Version        : 2:1.20.4-1+deb10u18
CVE ID         : CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server,
which may result in privilege escalation if the X server is running
privileged.


For Debian 11 bullseye, these problems have been fixed in version
2:1.20.4-1+deb10u18.

We recommend that you upgrade your xorg-server packages.

For the detailed security status of xorg-server please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/xorg-server

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=05/V
-----END PGP SIGNATURE-----


Reply to: