SUSE-SU-2026:4835-1
SUSE-SU-2026:4835-1 · Security update for xwayland
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). - CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). - CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). - CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). - CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). - CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). - CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). - CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240). - CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). - CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). - CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
xwayland SUSE:Linux Enterprise Workstation Extension 15 SP7
- Affected ranges
- ECOSYSTEM: < 24.1.5-150700.3.25.1
Update to 24.1.5-150700.3.25.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264835-1/
- https://bugzilla.suse.com/1281213
- https://bugzilla.suse.com/1281218
- https://bugzilla.suse.com/1281220
- https://bugzilla.suse.com/1281225
- https://bugzilla.suse.com/1281227
- https://bugzilla.suse.com/1281233
- https://bugzilla.suse.com/1281236
- https://bugzilla.suse.com/1281238
- https://bugzilla.suse.com/1281240
- https://bugzilla.suse.com/1281241
- https://bugzilla.suse.com/1281242
- https://bugzilla.suse.com/1281244
- https://www.suse.com/security/cve/CVE-2026-88812
- https://www.suse.com/security/cve/CVE-2026-93515
- https://www.suse.com/security/cve/CVE-2026-93516
- https://www.suse.com/security/cve/CVE-2026-93517
- https://www.suse.com/security/cve/CVE-2026-93518
- https://www.suse.com/security/cve/CVE-2026-93519
- https://www.suse.com/security/cve/CVE-2026-93520
- https://www.suse.com/security/cve/CVE-2026-93521
- https://www.suse.com/security/cve/CVE-2026-93522
- https://www.suse.com/security/cve/CVE-2026-93523
- https://osv.dev/vulnerability/SUSE-SU-2026:4835-1