SUSE-SU-2025:21149-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation bsc1251958. - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal bsc1251959. - CVE-2025-62231: Fixed value overflow in Xkb extension XkbSetCompatMap...

CLSA-2025-1764081820 xorg-x11-server-Xwayland: Fix of 3 CVEs

CVE-2025-62229: fix use-after-free caused by incorrect error cleanup in present notify handling - CVE-2025-62230: fix use-after-free caused by improper XKB resource cleanup - CVE-2025-62231: fix overflow caused by improper bounds checking in XkbSetCompatMap...

xorg: xmayland: Value overflow in XkbSetCompatMap()

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

xorg: xmayland: Value overflow in XkbSetCompatMap()

A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...

Low: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

AlmaLinux 10 : xorg-x11-server-Xwayland (ALSA-2025:21035)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21035 advisory. xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal...

CLSA-2025-1763138343 tigervnc: Fix of CVE-2025-62231

CVE-2025-62231: fix improper bounds checking in XkbSetCompatMap function to prevent unsigned short overflow and potential memory corruption or crash...

RLSA-2025:20960 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal CVE-2025-62230 xorg: xmayland: Value overflow in XkbSetCompatMap...

RockyLinux 9 : xorg-x11-server-Xwayland (RLSA-2025:20960)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20960 advisory. xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal...

Moderate: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ALSA-2025:21035 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal CVE-2025-62230 xorg: xmayland: Value overflow in XkbSetCompatMap...

RLSA-2025:19435 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: xmayland: Use-after-free in XPresentNotify structure creation CVE-2025-62229 xorg: xwayland: Use-after-free in Xkb client resource removal CVE-2025-62230 xorg: xmayland: Value overflow in XkbSetCompatMap...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990505 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 filelock:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989562 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989289 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthopcompatmode. While reading nexthopcompatmode, it can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989974 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: Fix memory leak in compatinsnlist compatinsnlist handles the 32-bit version of the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988902 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix the msg-req tlv len check in tipcnlcompatnametabledumpheader This is a follow-up for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990295 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 filelock:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990249 advisory. In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989830 advisory. In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign...