SUSE-SU-2026:2426-1
SUSE-SU-2026:2426-1 · Security update for xwayland
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) - Font Alias Stack-based Buffer Overflow. (bsc#1266294) - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) - XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) - XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) - XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) - XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) - XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
xwayland SUSE:Linux Enterprise Workstation Extension 15 SP7
- Affected ranges
- ECOSYSTEM: < 24.1.5-150700.3.19.1
Update to 24.1.5-150700.3.19.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20262426-1/
- https://bugzilla.suse.com/1266294
- https://bugzilla.suse.com/1266295
- https://bugzilla.suse.com/1266296
- https://bugzilla.suse.com/1266297
- https://bugzilla.suse.com/1266298
- https://bugzilla.suse.com/1266299
- https://bugzilla.suse.com/1266300
- https://bugzilla.suse.com/1266301
- https://osv.dev/vulnerability/SUSE-SU-2026:2426-1