Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the luaLloadfile plugin in configuration directories. An attacker can execute unauthorized code and access sensitive information by placing a specially crafted Lua bytecode file in a system or user...

PT-2026-29525

Name of the Vulnerable Software and Affected Versions libinput affected versions not specified Description A flaw exists in libinput where an attacker who can deploy a Lua plugin file in specific system directories can exploit a dangling pointer vulnerability. This occurs when a garbage collectio...

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference in the Lua plugin handling. An attacker can access sensitive information by deploying a malicious Lua plugin file in specific system directories, which triggers a dangling pointer to be printed to system logs...

MiracleLinux 4 : firefox-52.7.3-1.0.1.AXS4 (AXSA:2018-2955:04)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2955:04 advisory. firefox: Use-after-free in compositor potentially allows code execution CVE-2018-5148 Tenable has extracted the preceding description block directly from the...

Advisory ROSA-SA-2025-3112

Software: cairo 1.15.12 OS: ROSA Virtualization 2.1 packageevrstring: cairo-1.15.12-6.rv3 CVE-ID: CVE-2020-35492 BDU-ID: 2021-03445 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the image-compositor.c component of the Cairo vector graphics library is related to a data stack buffer overflow...

Advisory ROSA-SA-2025-3111

Software: pixman 0.38.4 OS: ROSA Virtualization 2.1 packageevrstring: pixman-0.38.4-4.rv3 CVE-ID: CVE-2020-35492 BDU-ID: 2021-03445 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the image-compositor.c component of the Cairo vector graphics library is related to a data stack buffer overflow...

[SECURITY] Fedora 42 Update: qt5-qtwayland-5.15.18-1.fc42

Qt5 - Wayland platform support and QtCompositor module...

JLSEC-2025-17 A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4

A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untruste...

EUVD-2018-16934

Malware in sbrugna...

EUVD-2012-5033

Malware in sbrugna...

EUVD-2014-1792

Malware in sbrugna...

EUVD-2022-31087

Malicious code in bioql PyPI...

EUVD-2023-23649

Malicious code in bioql PyPI...

[SECURITY] Fedora 42 Update: xwayland-satellite-0.7-1.fc42

xwayland-satellite grants rootless Xwayland integration to any Wayland compositor implementing xdgwmbase and viewporter. This is particularly useful for compositors that understandably do not want to go through implementing support for rootless Xwayland themselves...

[SECURITY] Fedora 42 Update: niri-25.08-1.fc42

A scrollable-tiling Wayland compositor...

[SECURITY] Fedora 41 Update: xwayland-satellite-0.7-1.fc41

xwayland-satellite grants rootless Xwayland integration to any Wayland compositor implementing xdgwmbase and viewporter. This is particularly useful for compositors that understandably do not want to go through implementing support for rootless Xwayland themselves...

[SECURITY] Fedora 41 Update: niri-25.08-1.fc41

A scrollable-tiling Wayland compositor...

z2d 安全漏洞

z2d is an open source 2D graphics library written in the pure Zig language by Chris Marchesi, an individual developer. A security vulnerability exists in z2d version 0.6.0, which stems from the possibility that the source surface may be completely out of bounds on the x-axis when using...

kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

The vulnerability of the communication protocol between the client and the composer, Wayland, is related to a potential overflow of data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of the Wayland communication protocol between the client and the composer is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...