USN-7299-3 xorg-server, xwayland regression

USN-7299-2 fix vulnerabilities in X.Org X Server. This fix caused regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update reverts it pending further investigation. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations...

Ubuntu: Security Advisory (USN-7299-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7299-2 xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities

USN-7299-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issu...

FreeBSD : xorg server -- Multiple vulnerabilities (f4297478-fa62-11ef-b597-001fc69cd6dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f4297478-fa62-11ef-b597-001fc69cd6dc advisory. The X.Org project reports: The root cursor is referenced in the xserver as a global variable. ...

Linux Distros Unpatched Vulnerability : CVE-2024-31083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs...

Linux Distros Unpatched Vulnerability : CVE-2023-6377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and...

Debian: Security Advisory (DLA-4072-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4072-1 xorg-server - security update

Bulletin has no description...

[SECURITY] [DLA 4072-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4072-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 01, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5872-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5872-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2025 https://www.debian.org/security/faq -...

Debian dla-4072 : xdmx - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4072 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4072-1 [email protected]...

Debian dsa-5872 : xnest - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5872 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5872-1 [email protected] https://www.debian.org/securit...

DSA-5872-1 xorg-server - security update

Bulletin has no description...

SUSE-SU-2025:0732-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2025-26594: Use-after-free of the root cursor bsc1237427. - CVE-2025-26595: Buffer overflow in XkbVModMaskText bsc1237429. - CVE-2025-26596: Heap overflow in XkbWriteKeySyms bsc1237430. - CVE-2025-26597: Buffer overflow in...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2025-26594: Use-after-free of the root cursor bsc1237427. CVE-2025-26595: Buffer overflow in XkbVModMaskText bsc1237429. CVE-2025-26596: Heap overflow in XkbWriteKeySyms bsc1237430. CVE-2025-26597: Buffer overflow in...

SUSE CVE-2025-26599

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-15slack15.0.txz: Rebuilt. This update fixes security issues: Use-after-free of the root cursor. Buffer...

AZL-57468 CVE-2025-26600 affecting package xorg-x11-server for versions less than 1.20.10-15

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

AZL-57277 CVE-2025-26595 affecting package xorg-x11-server 1.20.10-6

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...