Advisory ROSA-SA-2025-2951

software: xwayland 24.1.8 WASP: ROSA-CHROME unaffected versions = xwayland-24.1.8-1 affected versions xwayland-24.1.8-1 CVE-ID: CVE-2025-49175 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: No translation CVE-STATUS: The vulnerability has been resolved. CVE-REV: To close the vulnerability, run the...

Advisory ROSA-SA-2025-2916

software: xwayland 24.1.6 WASP: ROSA-CHROME unaffected versions = xwayland-24.1.6-1 affected versions xwayland-24.1.6-1 CVE-ID: CVE-2025-26594 BDU-ID: 2025-04129 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Wayland protocol implementation for X.Org XWayland, an implementation of the X Windo...

PT-2025-7897

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description An issue was found where the function compCheckRedirect may fail to allocate the backing pixmap, leading to a BadAlloc error. This error occurs without validating the window tree...

PT-2025-7899

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description A use-after-free flaw was found in the software. The issue occurs when changing an alarm, where the values of the change mask are evaluated one after the other. If one of the chang...

PT-2025-7896

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description An out-of-bounds write flaw was found in the function GetBarrierDevice, which searches for the pointer device based on its device ID. If no matching device ID is found, the code...