{"id":"SUSE-SU-2026:22180-1","aliases":[],"status":"published","title":"Security update for xwayland","description":"This update for xwayland fixes the following issues:\n\n- CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301)\n- Font Alias Stack-based Buffer Overflow. (bsc#1266294)\n- GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300)\n- XKB Key Types Stack-based Buffer Overflow. (bsc#1266296)\n- XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297)\n- XSYNC Use-After-Free in FreeCounter(). (bsc#1266298)\n- XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295)\n- XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-06-19T16:53:52Z","modified":"2026-06-24T18:24:19Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"xwayland","fixed_in":["24.1.6-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"xwayland","fixed_in":["24.1.6-160000.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.6-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.6-160000.5.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622180-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1266294","tags":["report"]},{"url":"https://bugzilla.suse.com/1266295","tags":["report"]},{"url":"https://bugzilla.suse.com/1266296","tags":["report"]},{"url":"https://bugzilla.suse.com/1266297","tags":["report"]},{"url":"https://bugzilla.suse.com/1266298","tags":["report"]},{"url":"https://bugzilla.suse.com/1266299","tags":["report"]},{"url":"https://bugzilla.suse.com/1266300","tags":["report"]},{"url":"https://bugzilla.suse.com/1266301","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2026:22180-1","title":"Security update for xwayland","description":"This update for xwayland fixes the following issues:\n\n- CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301)\n- Font Alias Stack-based Buffer Overflow. (bsc#1266294)\n- GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300)\n- XKB Key Types Stack-based Buffer Overflow. (bsc#1266296)\n- XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297)\n- XSYNC Use-After-Free in FreeCounter(). (bsc#1266298)\n- XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295)\n- XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)\n","status":"published","published":"2026-06-19T16:53:52Z","modified":"2026-06-24T18:24:19.25422037Z","updated_at":"2026-11-02T15:54:02.654057Z"}]}}