p PatchFirst

PatchFirst · Latest vulnerabilities

xwayland vulnerabilities

Vulnerability published for xwayland in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 7

  1. SUSE-SU-2026:4835-1

    Not ratedFix available

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). - CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). - CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). - CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). - CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). - CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer O

    xwaylandOperating systems
    • Update to 24.1.5-150700.3.25.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. SUSE-SU-2026:2426-1

    Not ratedFix available

    Security update for xwayland

    This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) - Font Alias Stack-based Buffer Overflow. (bsc#1266294) - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) - XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) - XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) - XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) - XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) - XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)

    xwaylandOperating systems
    • Update to 24.1.5-150700.3.19.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2026:1328-1

    Not ratedFix available

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924). - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925). - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).

    xwaylandOperating systems
    • Update to 24.1.5-150700.3.14.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. SUSE-SU-2025:3874-1

    Not ratedFix available

    Security update for xwayland

    This update for xwayland fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed Use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed Value overflow in Xkb extension XkbSetCompatMap() (CVE-2025-62231, bsc#1251960)

    xwaylandOperating systems
    • Update to 24.1.5-150700.3.9.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. SUSE-SU-2025:01975-1

    Not ratedFix available

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082) - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084) - CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085) - CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087) - CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089) - CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090)

    xwaylandOperating systems
    • Update to 24.1.5-150700.3.3.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →