SUSE-SU-2026:2787-1

Details

Description of the patch:

This update for xwayland fixes the following issues

CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893).
CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).

Affected Packages

xwayland

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7SUSE Linux Enterprise Workstation Extension 15 SP7

Fixed in:

24.1.5-150700.3.22.1

References

ADVISORY

https://bugzilla.suse.com/1268893

ADVISORY

https://bugzilla.suse.com/1268894

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-July/027324.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-55999/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-56000/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262787-1/