SUSE-SU-2025:01975-1

CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082)
CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084)
CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085)
CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087)
CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089)
CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090)

References

Affected packages

Name: xwayland
Purl: pkg:rpm/suse/xwayland&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

24.1.5-150700.3.3.1

{
    "binaries": [
        {
            "xwayland": "24.1.5-150700.3.3.1"
        }
    ]
}