Alerts This Week
Warning Icon 1 1,111
Alerts This Week
Warning Icon 1 1,111

openSUSE xwayland Important Security Update Info 2026-21112-1

opensuse
Calendar Grey June 30, 2026
Dist Opensuse Esm H88
Security update for openSUSE addresses important issues in xwayland, fixing multiple bugs and vulnerabilities effectively.
-------------------------------------------------------------

Description

This update for xwayland fixes the following issues:

- CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301)

- Font Alias Stack-based Buffer Overflow. (bsc#1266294)

- GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300)

- XKB Key Types Stack-based Buffer Overflow. (bsc#1266296)

- XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297)

- XSYNC Use-After-Free in FreeCounter(). (bsc#1266298)

- XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295)

- XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-977=1

Topics%20covered

Topics Covered

security advisory buffer overflow important information disclosure out-of-bounds OpenSUSE

Patch

Package List

- openSUSE Leap 16.0:

xwayland-24.1.6-160000.5.1

xwayland-devel-24.1.6-160000.5.1

References

* bsc#1266294

* bsc#1266295

* bsc#1266296

* bsc#1266297

* bsc#1266298

* bsc#1266299

* bsc#1266300

* bsc#1266301

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21112-1
Rating: important
Affected Products: openSUSE Leap 16.0 An update that has 8 bug fixes can now be installed.

Topics%20covered

Topics Covered

security advisory buffer overflow important information disclosure out-of-bounds OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here