USN-7846-1: X.Org X Server vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code...

GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from not properly validating the length of user-supplied data when parsing XWD files, which could lead to a heap buffer overflow and remote code execution...

GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XWD files. The...

EUVD-2014-7944

Malware in sbrugna...

EUVD-2006-4643

Malware in sbrugna...

EUVD-2014-7948

Malware in sbrugna...

EUVD-2007-2432

Malware in sbrugna...

EUVD-2020-22449

Malware in sbrugna...

EUVD-2014-3141

Malware in sbrugna...

EUVD-2013-1966

Malware in sbrugna...

EUVD-2011-1441

Malware in sbrugna...

EUVD-2014-7939

Malware in sbrugna...

EUVD-2014-7938

Malware in sbrugna...

EUVD-2014-7949

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2025-644483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-644483 advisory. A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow conditi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2025-984849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984849 advisory. A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger...

The vulnerability of the XFIXES extension in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, allows a perpetrator to access confidential data.

The vulnerability of the XFIXES extension in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server for the X Window System, is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Moderate: xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fixes: xterm: Buffer overflow in setsixel in graphicssixel.c CVE-2022-24130 For more details about the...

ALSA-2025:14075 Moderate: xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly. Security Fixes: xterm: Buffer overflow in setsixel in graphicssixel.c CVE-2022-24130 For more details about the...

xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...