SUSE-SU-2026:1328-1
SUSE-SU-2026:1328-1 · Security update for xwayland
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for xwayland fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924). - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925). - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
xwayland SUSE:Linux Enterprise Workstation Extension 15 SP7
- Affected ranges
- ECOSYSTEM: < 24.1.5-150700.3.14.1
Update to 24.1.5-150700.3.14.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20261328-1/
- https://bugzilla.suse.com/1260922
- https://bugzilla.suse.com/1260923
- https://bugzilla.suse.com/1260924
- https://bugzilla.suse.com/1260925
- https://bugzilla.suse.com/1260926
- https://www.suse.com/security/cve/CVE-2026-33999
- https://www.suse.com/security/cve/CVE-2026-34000
- https://www.suse.com/security/cve/CVE-2026-34001
- https://www.suse.com/security/cve/CVE-2026-34002
- https://www.suse.com/security/cve/CVE-2026-34003
- https://osv.dev/vulnerability/SUSE-SU-2026:1328-1