Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

openSUSE Xorg X11 Server Notable Buffer Overflow Risk 2026-2224-1

opensuse
Calendar Grey June 2, 2026
Dist Opensuse Esm H88
This advisory details an important buffer overflow threat in xorg-x11-server for openSUSE with significant fixes available.
An update that has nine security fixes can now be installed.

Description

This update for xorg-x11-server fixes the following issues

* CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301)

* DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write.

(bsc#1266302)

* Font Alias Stack-based Buffer Overflow. (bsc#1266294)

* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300)

* XKB Key Types Stack-based Buffer Overflow. (bsc#1266296)

* XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297)

* XSYNC Use-After-Free in FreeCounter(). (bsc#1266298)

* XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295)

* XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)

Topics%20covered

Topics Covered

security advisory update buffer overflow important information disclosure Xorg X11 Server out-of-bounds OpenSUSE

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2224=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2224=1

* openSUSE Leap 15.5

zypper in -t patch SUSE-2026-2224=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2224=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2224=1

Package List

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64

x86_64)

* xorg-x11-server-extra-21.1.4-150500.7.49.1

* xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.49.1

* xorg-x11-server-21.1.4-150500.7.49.1

* xorg-x11-server-extra-debuginfo-21.1.4-150500.7.49.1

* xorg-x11-server-debuginfo-21.1.4-150500.7.49.1

* xorg-x11-server-sdk-21.1.4-150500.7.49.1

* xorg-x11-server-debugsource-21.1.4-150500.7.49.1

* xorg-x11-server-Xvfb-21.1.4-150500.7.49.1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64

x86_64)

* xorg-x11-server-extra-21.1.4-150500.7.49.1

* xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.49.1

* xorg-x11-server-21.1.4-150500.7.49.1

* xorg-x11-server-debuginfo-21.1.4-150500.7.49.1

* xorg-x11-server-extra-debuginfo-21.1.4-150500.7.49.1

* xorg-x11-server-sdk-21.1.4-150500.7.49.1

* xorg-x11-server-debugsource-21.1.4-150500.7.49.1

* xorg-x11-server-Xvfb-21.1.4-150500.7.49.1

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

*...

Read the Full Advisory

References

* bsc#1266294

* bsc#1266295

* bsc#1266296

* bsc#1266297

* bsc#1266298

* bsc#1266299

* bsc#1266300

* bsc#1266301

* bsc#1266302

## References:

* https://bugzilla.suse.com/show_bug.cgi?id=1266294

* https://bugzilla.suse.com/show_bug.cgi?id=1266295

* https://bugzilla.suse.com/show_bug.cgi?id=1266296

* https://bugzilla.suse.com/show_bug.cgi?id=1266297

* https://bugzilla.suse.com/show_bug.cgi?id=1266298

* https://bugzilla.suse.com/show_bug.cgi?id=1266299

* https://bugzilla.suse.com/show_bug.cgi?id=1266300

* https://bugzilla.suse.com/show_bug.cgi?id=1266301

* https://bugzilla.suse.com/show_bug.cgi?id=1266302

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2224-1
Release Date: 2026-06-02T08:41:58Z
Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5

Topics%20covered

Topics Covered

security advisory update buffer overflow important information disclosure Xorg X11 Server out-of-bounds OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here