Security update for xwayland

This update for xwayland fixes the following issues: CVE-2025-49175: Out-of-bounds access in X Rendering extension Animated cursors bsc1244082. CVE-2025-49176: Integer overflow in Big Requests Extension bsc1244084. CVE-2025-49177: Data leak in XFIXES Extension 6 XFixesSetClientDisconnectMode...

CVE-2025-49178

CVE-2025-49178 affects the X server’s request handling (X.Org/X server). The issue: non-zero bytes_to_ignore in a client request can cause the server to skip processing another client’s request, enabling denial of service. Connected IBM AIX advisory groups this under a broader Xorg/X11 DoS set an...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the virtqueuepop function in the QEMU hardware/virtio/virtio.c file is related to resource management errors. Exploiting this vulnerability allows a local attacker to cause a service failure e.g., memory consumption, premature termination of the QEMU process by sending reques...