Home / mailings [slackware-security] xorg-server (SSA:2025-302-01)
Posted on 30 October 2025
Slackware Security[slackware-security] xorg-server (SSA:2025-302-01)
New xorg-server packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/xorg-server-1.20.14-i586-18_slack15.0.txz: Rebuilt.
This update fixes security issues:
Use-after-free in XPresentNotify structures creation.
Use-after-free in Xkb client resource removal.
Value overflow in Xkb extension XkbSetCompatMap().
These issues were found by Jan-Niklas Sohn working with Trend Micro Zero
Day Initiative.
For more information, see:
https://lists.x.org/archives/xorg-announce/2025-October/003635.html
https://www.cve.org/CVERecord?id=CVE-2025-62229
https://www.cve.org/CVERecord?id=CVE-2025-62230
https://www.cve.org/CVERecord?id=CVE-2025-62231
(* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-i586-18_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-i586-18_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-i586-18_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-i586-16_slack15.0.txz: Rebuilt.
This update fixes security issues:
Use-after-free in XPresentNotify structures creation.
Use-after-free in Xkb client resource removal.
Value overflow in Xkb extension XkbSetCompatMap().
These issues were found by Jan-Niklas Sohn working with Trend Micro Zero
Day Initiative.
For more information, see:
https://lists.x.org/archives/xorg-announce/2025-October/003635.html
https://www.cve.org/CVERecord?id=CVE-2025-62229
https://www.cve.org/CVERecord?id=CVE-2025-62230
https://www.cve.org/CVERecord?id=CVE-2025-62231
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xephyr-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xnest-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xvfb-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xwayland-21.1.4-i586-16_slack15.0.txz
Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xephyr-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xnest-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xvfb-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xwayland-21.1.4-x86_64-16_slack15.0.txz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xephyr-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xnest-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xvfb-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xwayland-24.1.9-i686-1.txz
Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xephyr-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xnest-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xvfb-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xwayland-24.1.9-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 packages:
3c6cf60ad2c1897c707111c2746db541 xorg-server-1.20.14-i586-18_slack15.0.txz
6dd742c1d1fc775bc4eed5d2d0b46180 xorg-server-xephyr-1.20.14-i586-18_slack15.0.txz
eb4d9bd11f731357811648b2395c8a35 xorg-server-xnest-1.20.14-i586-18_slack15.0.txz
4ecdb86d226f1989620d35ba26b2dc10 xorg-server-xvfb-1.20.14-i586-18_slack15.0.txz
8927c0245aa078335118b3fdbcbd1324 xorg-server-xwayland-21.1.4-i586-16_slack15.0.txz
Slackware x86_64 15.0 packages:
dba9e24a379d7708c4d42370f139b611 xorg-server-1.20.14-x86_64-18_slack15.0.txz
9f47c58055c9c9345439ef55f93792f4 xorg-server-xephyr-1.20.14-x86_64-18_slack15.0.txz
8ae939b55f981da4bd47e92d95ffa385 xorg-server-xnest-1.20.14-x86_64-18_slack15.0.txz
aac975997d6766b126bfed17579a3799 xorg-server-xvfb-1.20.14-x86_64-18_slack15.0.txz
a7335b5746dcccc84ec1061dfea03f33 xorg-server-xwayland-21.1.4-x86_64-16_slack15.0.txz
Slackware -current packages:
5c8f6f43521bfed8f6a592c8ed21e280 x/xorg-server-21.1.20-i686-1.txz
e625c0da6a33d84d2c7de75f7e79f5ae x/xorg-server-xephyr-21.1.20-i686-1.txz
cd34a6f736e045e763aa2347a4a28d13 x/xorg-server-xnest-21.1.20-i686-1.txz
58f905f8a8a41e3be0b9e90955a5027f x/xorg-server-xvfb-21.1.20-i686-1.txz
394e96bdfa6d55afe3459a38de81ffe9 x/xorg-server-xwayland-24.1.9-i686-1.txz
Slackware x86_64 -current packages:
cd0a996ecab7cd0d0cc340324f260cb3 x/xorg-server-21.1.20-x86_64-1.txz
2ef509cfa80a02ac977eedf495a2a23e x/xorg-server-xephyr-21.1.20-x86_64-1.txz
babe19f4898ad6a53f6eb52005aa0934 x/xorg-server-xnest-21.1.20-x86_64-1.txz
136eafbc4115bff5aa50eec6d5fb6b51 x/xorg-server-xvfb-21.1.20-x86_64-1.txz
2da4278a7b0d51a18f8eac670494b7b1 x/xorg-server-xwayland-24.1.9-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg xorg-server-*.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
