CVE catalog

CVE-2020-25697

Security update for xtrans

[CVE catalog]

Severity
High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.31% · Oct 25, 2026

A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntulibx11pro2:1.6.1-1ubuntu1vulnerable
Ubuntulibx11pro2:1.6.1-1ubuntu2vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu1vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1+esm1vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1+esm2vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1+esm3vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1+esm4vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1+esm5vulnerable
Ubuntulibx11pro2:1.6.2-1ubuntu2.1+esm6vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.1vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm1vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm2vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm3vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm4vulnerable
Ubuntulibx11pro2:1.6.3-1ubuntu2.2+esm5vulnerable
Ubuntulibx11pro2:1.6.4-3vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.1vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.2vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.3vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.4vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.4+esm1vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.4+esm2vulnerable
Ubuntulibx11pro2:1.6.4-3ubuntu0.4+esm3vulnerable
Ubuntulibx11pro2:1.6.8-1vulnerable
Ubuntulibx11pro2:1.6.9-2vulnerable
Ubuntulibx11pro2:1.6.9-2ubuntu1vulnerable
Ubuntulibx11pro2:1.6.9-2ubuntu1.1vulnerable
Ubuntulibx11pro2:1.6.9-2ubuntu1.2vulnerable
Ubuntulibx11pro2:1.6.9-2ubuntu1.5vulnerable
Ubuntulibx11pro2:1.6.9-2ubuntu1.6vulnerable
Ubuntulibx11pro2:1.6.9-2ubuntu1.6+esm1vulnerable
Ubuntulibx1122.042:1.7.2-1vulnerable
Ubuntulibx1122.042:1.7.2-2vulnerable
Ubuntulibx1122.042:1.7.2-2build1vulnerable
Ubuntulibx1122.042:1.7.5-1vulnerable
Ubuntulibx1122.042:1.7.5-1ubuntu0.2vulnerable
Ubuntulibx1122.042:1.7.5-1ubuntu0.3vulnerable
Ubuntulibx1122.042:1.7.5-1ubuntu0.4vulnerable
Opensusextranstumbleweed1.5.0-1.1fixed
Susextranslinux enterprise software development kit 12 sp51.3.5-5.3.1fixed
Susextranslinux enterprise module for basesystem 15 sp41.3.5-150000.3.3.1fixed
Susextranslinux enterprise module for basesystem 15 sp51.3.5-150000.3.3.1fixed
Susextranslinux enterprise real time 15 sp31.3.5-150000.3.3.1fixed
Opensusextransleap 15.41.3.5-150000.3.3.1fixed
Opensusextransleap 15.51.3.5-150000.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusextransrpmtumbleweed1.5.0-1.1Not reportedOPENSUSE-SU-2024:12993-1Not reported
Susextransrpmlinux enterprise software development kit 12 sp51.3.5-5.3.1Not reportedSUSE-SU-2023:3189-1Not reported
Susextransrpmlinux enterprise module for basesystem 15 sp41.3.5-150000.3.3.1Not reportedSUSE-SU-2023:3190-1Not reported
Susextransrpmlinux enterprise module for basesystem 15 sp51.3.5-150000.3.3.1Not reportedSUSE-SU-2023:3190-1Not reported
Susextransrpmlinux enterprise real time 15 sp31.3.5-150000.3.3.1Not reportedSUSE-SU-2023:3190-1Not reported
Opensusextransrpmleap 15.41.3.5-150000.3.3.1Not reportedSUSE-SU-2023:3190-1Not reported
Opensusextransrpmleap 15.51.3.5-150000.3.3.1Not reportedSUSE-SU-2023:3190-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [xtrans]Fixed

    Source package: [xtrans]

    Details (1)

    • 1.6.0-2.3 · noarch · tumbleweed

      Fixed · Fixed: 1.5.0-1.1

      pypi · xtrans · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]