RLSA-2025:9304 Important: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors CVE-2025-49175 xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests...

NewStart CGSL MAIN 6.06 : xorg-x11-server Multiple Vulnerabilities (NS-SA-2025-0235)

The remote NewStart CGSL host, running version MAIN 6.06, has xorg-x11-server packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues,...

CLSA-2025-1757666519 xorg-x11-server: Fix of CVE-2025-49178

CVE-2025-49178: fix request handling flaw causing potential denial of service...

CLSA-2025-1757662405 xorg-x11-server: Fix of CVE-2025-49178

CVE-2025-49178: fix request handling flaw causing potential denial of service...

Linux Distros Unpatched Vulnerability : CVE-2022-49737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by...

Linux Distros Unpatched Vulnerability : CVE-2022-2320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of prope...

CLSA-2025-1756409662 xorg-x11-server: Fix of 8 CVEs

CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey - CVE-2025-26598: Xi: Fix barrier device search -...

CLSA-2025-1756408410 xorg-x11-server: Fix of 8 CVEs

CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey - CVE-2025-26598: Xi: Fix barrier device search -...

Malicious code in xorg-renderproto (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41800 Malicious code in xorg-renderproto (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2024-31082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap function. This issue occurs when byte-swapped length values...

Linux Distros Unpatched Vulnerability : CVE-2022-2319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request...

Linux Distros Unpatched Vulnerability : CVE-2022-46340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the sta...

RHEL 6 : tigervnc (RHSA-2025:13998)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13998 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it...

Linux Distros Unpatched Vulnerability : CVE-2023-1393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay...

Linux Distros Unpatched Vulnerability : CVE-2022-46341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked wit...

Linux Distros Unpatched Vulnerability : CVE-2022-4283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in...

CVE-2025-49177 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

CVE-2025-49177 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2. A patched version of the package is available...

CVE-2025-49175 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

CVE-2025-49175 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2. A patched version of the package is available...

CVE-2025-49178 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

CVE-2025-49178 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2. A patched version of the package is available...