[SECURITY] Fedora 45 Update: xorg-x11-server-Xwayland-24.1.14-2.fc45

Xwayland is an X server for running X clients under Wayland...

CLEANSTART-2025-XT87301 out-of-bounds write flaw was found in the xorg-x11-server

CVE-2023-5367 affects multiple packages. A out-of-bounds write flaw was found in the xorg-x11-server. See references for individual vulnerability details...

Fedora 45 : xorg-x11-server (2026-8604653718)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8604653718 advisory. xorg-server-21.1.25 fixups ---- Update to xserver 21.1.24, Security fixes for CVE-2026-88812, CVE-2026-93515, CVE-2026-93516, CVE-2026-93517,...

Fedora 45 : xorg-x11-server-Xwayland (2026-6e2dcf8dd2)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6e2dcf8dd2 advisory. Backport a couple of fixups from upstream to fix a regression affecting proton games https://gitlab.freedesktop.org/xorg/xserver/-/workitems/1938 --...

Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.

Summary The xorg-x11-server, modhttp2,httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries are used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. The applicable CVEs are as follows: CVE-2026-33999,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147022 advisory. An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different maste...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147008 advisory. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147005 advisory. A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147010 advisory. Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overfl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147006 advisory. A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an intege...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-146998)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146998 advisory. A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are add...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147032 advisory. A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remot...

AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793286310)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793286310 advisory. - A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-146995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146995 advisory. A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147018 advisory. A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147041 advisory. A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when...

MiracleLinux 8 : xorg-x11-server-1.20.11-28.el8_10.5 (AXSA:2026-2200:20)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2200:20 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147027 advisory. A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147036 advisory. A flaw was identified in the X.Org X servers X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147029 advisory. A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and write...