Fedora: Security Advisory (FEDORA-2025-4a832bf2b1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7299-3 xorg-server, xwayland regression

USN-7299-2 fix vulnerabilities in X.Org X Server. This fix caused regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update reverts it pending further investigation. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26597)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26597 advisory. - A buffer overflow flaw was found in X.Org and Xwayland. If...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26598)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26598 advisory. - An out-of-bounds write flaw was found in X.Org and Xwayland. The functio...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26599)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26599 advisory. - An access to an uninitialized pointer flaw was found in X.Org and...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26596)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26596 advisory. - A heap overflow flaw was found in X.Org and Xwayland. The computation of...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26601)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26601 advisory. - A use-after-free flaw was found in X.Org and Xwayland. When changing an...

Oracle Linux 8 : tigervnc (ELSA-2025-2502)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2502 advisory. - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79397 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in...

Ubuntu: Security Advisory (USN-7299-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26601 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26601 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26594 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26594 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26597 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26597 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26600 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26600 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26595 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26595 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26599 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26599 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26596 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26596 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26598 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26598 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

xorg: xwayland: Heap overflow in XkbWriteKeySyms()

A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms differs from what is written in XkbWriteKeySyms, which may lead to a heap-based buffer overflow...

xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

xorg: xwayland: Use of uninitialized pointer in compRedirectWindow()

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...