Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

openSUSE xorg-x11-server Important Security Issues 2026-2223-1

opensuse
Calendar Grey June 2, 2026
Scroller Opensuse
Nine critical security fixes for xorg-x11-server in openSUSE now available to enhance system protection and integrity.
An update that has nine security fixes can now be installed.

Description

This update for xorg-x11-server fixes the following issues

* CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301)

* DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write.

(bsc#1266302)

* Font Alias Stack-based Buffer Overflow. (bsc#1266294)

* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300)

* XKB Key Types Stack-based Buffer Overflow. (bsc#1266296)

* XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297)

* XSYNC Use-After-Free in FreeCounter(). (bsc#1266298)

* XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295)

* XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)

Topics%20covered

Topics Covered

security advisory buffer overflow important information disclosure out-of-bounds OpenSUSE use-after-free

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2026-2223=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2223=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2223=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2223=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2223=1

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

* xorg-x11-server-extra-1.20.3-150400.38.71.1

* xorg-x11-server-1.20.3-150400.38.71.1

* xorg-x11-server-sdk-1.20.3-150400.38.71.1

* xorg-x11-server-source-1.20.3-150400.38.71.1

* xorg-x11-server-debuginfo-1.20.3-150400.38.71.1

* xorg-x11-server-extra-debuginfo-1.20.3-150400.38.71.1

* xorg-x11-server-debugsource-1.20.3-150400.38.71.1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64

x86_64)

* xorg-x11-server-extra-1.20.3-150400.38.71.1

* xorg-x11-server-1.20.3-150400.38.71.1

* xorg-x11-server-sdk-1.20.3-150400.38.71.1

* xorg-x11-server-debuginfo-1.20.3-150400.38.71.1

* xorg-x11-server-extra-debuginfo-1.20.3-150400.38.71.1

* xorg-x11-server-debugsource-1.20.3-150400.38.71.1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64

x86_64)

* xorg-x11-server-extra-1.20.3-150400.38.71.1

* xorg-x11-server-1.20.3-150400.38.71.1

* xorg-x11-server-sdk-1.20.3-150400.38.71.1

* xorg-x11-server-debuginfo-1.20.3-150400.38.71.1

*...

Read the Full Advisory

References

* bsc#1266294

* bsc#1266295

* bsc#1266296

* bsc#1266297

* bsc#1266298

* bsc#1266299

* bsc#1266300

* bsc#1266301

* bsc#1266302

## References:

* https://bugzilla.suse.com/show_bug.cgi?id=1266294

* https://bugzilla.suse.com/show_bug.cgi?id=1266295

* https://bugzilla.suse.com/show_bug.cgi?id=1266296

* https://bugzilla.suse.com/show_bug.cgi?id=1266297

* https://bugzilla.suse.com/show_bug.cgi?id=1266298

* https://bugzilla.suse.com/show_bug.cgi?id=1266299

* https://bugzilla.suse.com/show_bug.cgi?id=1266300

* https://bugzilla.suse.com/show_bug.cgi?id=1266301

* https://bugzilla.suse.com/show_bug.cgi?id=1266302

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2223-1
Release Date: 2026-06-02T08:41:31Z
Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4

Topics%20covered

Topics Covered

security advisory buffer overflow important information disclosure out-of-bounds OpenSUSE use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.