591 matches found
[SECURITY] Fedora 45 Update: wayland-1.26.0-3.fc45
Wayland is a protocol for a compositor to talk to its clients as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...
[SECURITY] Fedora 45 Update: noctalia-5.1.0-2.fc45
Noctalia is a native Wayland desktop shell for people who want a polished, configurable Linux desktop without stitching together a separate bar, launche r, notification daemon, lock screen, wallpaper tool, and settings UI...
[SECURITY] Fedora 45 Update: labwc-tweaks-0.1.0-3.fc45
labwc-tweaks is a GUI configuration application for the labwc wayland compositor...
[SECURITY] Fedora 45 Update: labwc-0.20.2-2.fc45
Labwc stands for Lab Wayland Compositor, where lab can mean any of the following: lightweight and box-inspired sense of experimentation and treading new ground inspired by BunsenLabs and ArchLabs your favorite pet Labwc is a wlroots-based window-stacking compositor for Wayland, inspired by Openbo...
Rocky Linux 10.0 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_10873)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510873 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK:...
[SECURITY] Fedora 45 Update: swayimg-5.6-2.fc45
Swayimg is a lightweight image viewer for Wayland display servers...
Astra Linux – Vulnerability in xorg-server, xwayland
A buffer overflow vulnerability was discovered in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or NULL, if no match is found. However, if no matching device ID is found, the code will return the last eleme...
Astra Linux – Vulnerability in Wayland
An internal reference count is maintained on the buffer pool; this count increments every time a new buffer is created from the pool. The reference count is stored as an integer. On LP64 systems, this can lead to an overflow if the client creates a large number of wlshm buffer objects, or if it...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...
Astra Linux – Vulnerability in Chromium
Before version 101.0.4951.41, using free after in the Ozone browser extension in Google Chrome allowed a remote attacker to potentially exploit heap corruption by running a Wayland test...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wayland (UTSA-2025-002252)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002252 advisory. An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on...
openSUSE 16 Security Update : kitty (openSUSE-SU-2026:21599-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21599-1 advisory. Changes in kitty: - Update to 0.48.2: Wayland: Fix regression in previous release that broke drag and drop on Plasma 10284 diff kitten: Fix a ra...
Fedora 44 : firefox (2026-fc11919789)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc11919789 advisory. Implement buffer stride support for PipeWire camera. ---- - Update to latest upstream 154.0 - Enabled Wayland session restore on KDE. Tenable has...
OPENSUSE-SU-2026:21599-1 Security update for kitty
This update for kitty fixes the following issues: Changes in kitty: - Update to 0.48.2: Wayland: Fix regression in previous release that broke drag and drop on Plasma 10284 diff kitten: Fix a rare crash when showing a large diff due to incorrect locking when highlighting Allow the private DCS...
RHSA-2026:53450 Red Hat Security Advisory: xorg-x11-server-Xwayland security update
Bulletin has no description...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow()
A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow. A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat
An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence()
A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence. A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to set up a fence and await that fence, then a second X connection...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...