This update for xwayland fixes the following issues:
* CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
* CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
* CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
* CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
* CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-1329=1 openSUSE-SLE-15.6-2026-1329=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
* xwayland-debuginfo-24.1.1-150600.5.23.1
* xwayland-24.1.1-150600.5.23.1
* xwayland-debugsource-24.1.1-150600.5.23.1
* xwayland-devel-24.1.1-150600.5.23.1
* bsc#1260922
* bsc#1260923
* bsc#1260924
* bsc#1260925
* bsc#1260926
## References:
* https://www.suse.com/security/cve/CVE-2026-33999.html
* https://www.suse.com/security/cve/CVE-2026-34000.html
* https://www.suse.com/security/cve/CVE-2026-34001.html
* https://www.suse.com/security/cve/CVE-2026-34002.html
* https://www.suse.com/security/cve/CVE-2026-34003.html
* https://bugzilla.suse.com/show_bug.cgi?id=1260922
* https://bugzilla.suse.com/show_bug.cgi?id=1260923
* https://bugzilla.suse.com/show_bug.cgi?id=1260924
* https://bugzilla.suse.com/show_bug.cgi?id=1260925
* https://bugzilla.suse.com/show_bug.cgi?id=1260926
Get the latest Linux and open source security news straight to your inbox.