-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  xorg-server (SSA:2025-302-01)

New xorg-server packages are available for Slackware 15.0 and -current to
fix security issues.


Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/xorg-server-1.20.14-i586-18_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  Use-after-free in XPresentNotify structures creation.
  Use-after-free in Xkb client resource removal.
  Value overflow in Xkb extension XkbSetCompatMap().
  These issues were found by Jan-Niklas Sohn working with Trend Micro Zero
  Day Initiative.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2025-October/003635.html
    https://www.cve.org/CVERecord?id=CVE-2025-62229
    https://www.cve.org/CVERecord?id=CVE-2025-62230
    https://www.cve.org/CVERecord?id=CVE-2025-62231
  (* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-i586-18_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-i586-18_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-i586-18_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-i586-16_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  Use-after-free in XPresentNotify structures creation.
  Use-after-free in Xkb client resource removal.
  Value overflow in Xkb extension XkbSetCompatMap().
  These issues were found by Jan-Niklas Sohn working with Trend Micro Zero
  Day Initiative.
  For more information, see:
    https://lists.x.org/archives/xorg-announce/2025-October/003635.html
    https://www.cve.org/CVERecord?id=CVE-2025-62229
    https://www.cve.org/CVERecord?id=CVE-2025-62230
    https://www.cve.org/CVERecord?id=CVE-2025-62231
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xephyr-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xnest-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xvfb-1.20.14-i586-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xwayland-21.1.4-i586-16_slack15.0.txz

Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xephyr-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xnest-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xvfb-1.20.14-x86_64-18_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xwayland-21.1.4-x86_64-16_slack15.0.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xephyr-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xnest-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xvfb-21.1.20-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xwayland-24.1.9-i686-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xephyr-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xnest-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xvfb-21.1.20-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xwayland-24.1.9-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 15.0 packages:
3c6cf60ad2c1897c707111c2746db541  xorg-server-1.20.14-i586-18_slack15.0.txz
6dd742c1d1fc775bc4eed5d2d0b46180  xorg-server-xephyr-1.20.14-i586-18_slack15.0.txz
eb4d9bd11f731357811648b2395c8a35  xorg-server-xnest-1.20.14-i586-18_slack15.0.txz
4ecdb86d226f1989620d35ba26b2dc10  xorg-server-xvfb-1.20.14-i586-18_slack15.0.txz
8927c0245aa078335118b3fdbcbd1324  xorg-server-xwayland-21.1.4-i586-16_slack15.0.txz

Slackware x86_64 15.0 packages:
dba9e24a379d7708c4d42370f139b611  xorg-server-1.20.14-x86_64-18_slack15.0.txz
9f47c58055c9c9345439ef55f93792f4  xorg-server-xephyr-1.20.14-x86_64-18_slack15.0.txz
8ae939b55f981da4bd47e92d95ffa385  xorg-server-xnest-1.20.14-x86_64-18_slack15.0.txz
aac975997d6766b126bfed17579a3799  xorg-server-xvfb-1.20.14-x86_64-18_slack15.0.txz
a7335b5746dcccc84ec1061dfea03f33  xorg-server-xwayland-21.1.4-x86_64-16_slack15.0.txz

Slackware -current packages:
5c8f6f43521bfed8f6a592c8ed21e280  x/xorg-server-21.1.20-i686-1.txz
e625c0da6a33d84d2c7de75f7e79f5ae  x/xorg-server-xephyr-21.1.20-i686-1.txz
cd34a6f736e045e763aa2347a4a28d13  x/xorg-server-xnest-21.1.20-i686-1.txz
58f905f8a8a41e3be0b9e90955a5027f  x/xorg-server-xvfb-21.1.20-i686-1.txz
394e96bdfa6d55afe3459a38de81ffe9  x/xorg-server-xwayland-24.1.9-i686-1.txz

Slackware x86_64 -current packages:
cd0a996ecab7cd0d0cc340324f260cb3  x/xorg-server-21.1.20-x86_64-1.txz
2ef509cfa80a02ac977eedf495a2a23e  x/xorg-server-xephyr-21.1.20-x86_64-1.txz
babe19f4898ad6a53f6eb52005aa0934  x/xorg-server-xnest-21.1.20-x86_64-1.txz
136eafbc4115bff5aa50eec6d5fb6b51  x/xorg-server-xvfb-21.1.20-x86_64-1.txz
2da4278a7b0d51a18f8eac670494b7b1  x/xorg-server-xwayland-24.1.9-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg xorg-server-*.txz


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCaQJgoAAKCRBqRGPAQBAi
M2qAAJ0fgxW/nn5hBajxDZJYQG6UlRDZMwCfRa1VPaKqzmLAdy0q3mX/yKcTKhI=
=N0Js
-----END PGP SIGNATURE-----