{"id":"SUSE-SU-2026:4636-1","summary":"Security update for xorg-x11-server","details":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n","modified":"2026-10-13T17:23:11.263380542Z","published":"2026-10-13T07:43:08Z","related":["CVE-2026-88812","CVE-2026-93515","CVE-2026-93516","CVE-2026-93517","CVE-2026-93518","CVE-2026-93519","CVE-2026-93520","CVE-2026-93521","CVE-2026-93523","CVE-2026-93524"],"upstream":["CVE-2026-88812","CVE-2026-93515","CVE-2026-93516","CVE-2026-93517","CVE-2026-93518","CVE-2026-93519","CVE-2026-93520","CVE-2026-93521","CVE-2026-93523","CVE-2026-93524"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264636-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281213"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281218"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281220"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281225"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281227"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281233"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281236"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281238"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281241"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281242"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-88812"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93515"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93516"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93517"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93518"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93519"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93520"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93521"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93523"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93524"}],"affected":[{"package":{"name":"xorg-x11-server","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-10.108.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-server":"1.19.6-10.108.1","xorg-x11-server-extra":"1.19.6-10.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4636-1.json"}},{"package":{"name":"xorg-x11-server","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-10.108.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-server":"1.19.6-10.108.1","xorg-x11-server-extra":"1.19.6-10.108.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4636-1.json"}}],"schema_version":"1.9.0"}