Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:20961 | Mondoo Vulnerability Intelligence

RHSA-2025:20961

HIGH7.3

Red Hat Security Advisory: xorg-x11-server security update

Published Nov 12, 2025

Modified 1 weeks ago

Fix available

Affected Packages

Red Hat:enterprise_linux:9::appstreamxorg-x11-server

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xdmx

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xdmx-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xephyr

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xephyr-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xnest

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xnest-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xorg

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xorg-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xvfb

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-Xvfb-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-common

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-debugsource

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-devel

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::appstreamxorg-x11-server-source

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xdmx

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xdmx-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xephyr

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xephyr-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xnest

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xnest-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xorg

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xorg-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xvfb

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-Xvfb-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-common

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-debuginfo

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-debugsource

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-devel

Fixed in:

0:1.20.11-32.el9_7

Red Hat:enterprise_linux:9::crbxorg-x11-server-source

Fixed in:

0:1.20.11-32.el9_7

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:20961 REPORThttps://access.redhat.com/security/cve/CVE-2025-62229 REPORThttps://access.redhat.com/security/cve/CVE-2025-62230 REPORThttps://access.redhat.com/security/cve/CVE-2025-62231 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2402649 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2402653 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2402660 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-62229 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-62230 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-62231 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20961.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-62229 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-62230 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-62231

CVSS Analysis

CVSS v3.1

7.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

LowI:L

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Upstream

CVE-2025-62229 CVE-2025-62230 CVE-2025-62231

Ecosystems

Red Hat enterprise_linux 9 appstream Red Hat enterprise_linux 9 crb

Timeline

PublishedNov 12, 2025

ModifiedJan 6, 2026