AZL-64262 CVE-2025-49180 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate...

AZL-64268 CVE-2025-49175 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...