xorg-x11-server-1.20.4-99.0.4.el7.AXS7

X.Org X11 X server

Security Fix(es):

* CVE-2025-49180: fix integer overflow in the RandR extension affecting the
RRChangeProviderProperty function

CVE(s):
CVE-2025-49180
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
CVE-2025-49176
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
CVE-2025-49179
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.