This update for xwayland fixes the following issues
- CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893).
- CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).
This update for xwayland fixes the following issues:
- Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958)
- Fixed Use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959)
- Fixed Value overflow in Xkb extension XkbSetCompatMap() (CVE-2025-62231, bsc#1251960)
This update for xwayland fixes the following issues:
- CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082)
- CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084)
- CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085)
- CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087)
- CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089)
- CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090)