{"id":"SUSE-SU-2026:4663-1","summary":"Security update for xorg-x11-server","details":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213).\n- CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218).\n- CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220).\n- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225).\n- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227).\n- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233).\n- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236).\n- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238).\n- CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241).\n- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242).\n","modified":"2026-10-14T17:30:08.607530662Z","published":"2026-10-14T11:34:16Z","related":["CVE-2026-88812","CVE-2026-93515","CVE-2026-93516","CVE-2026-93517","CVE-2026-93518","CVE-2026-93519","CVE-2026-93520","CVE-2026-93521","CVE-2026-93523","CVE-2026-93524"],"upstream":["CVE-2026-88812","CVE-2026-93515","CVE-2026-93516","CVE-2026-93517","CVE-2026-93518","CVE-2026-93519","CVE-2026-93520","CVE-2026-93521","CVE-2026-93523","CVE-2026-93524"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264663-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281213"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281218"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281220"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281225"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281227"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281233"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281236"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281238"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281241"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281242"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-88812"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93515"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93516"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93517"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93518"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93519"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93520"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93521"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93523"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93524"}],"affected":[{"package":{"name":"xorg-x11-server","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-server-sdk":"1.20.3-150400.38.77.1","xorg-x11-server":"1.20.3-150400.38.77.1","xorg-x11-server-extra":"1.20.3-150400.38.77.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4663-1.json"}},{"package":{"name":"xorg-x11-server","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-server":"1.20.3-150400.38.77.1","xorg-x11-server-extra":"1.20.3-150400.38.77.1","xorg-x11-server-sdk":"1.20.3-150400.38.77.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4663-1.json"}},{"package":{"name":"xorg-x11-server","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-server":"1.20.3-150400.38.77.1","xorg-x11-server-extra":"1.20.3-150400.38.77.1","xorg-x11-server-sdk":"1.20.3-150400.38.77.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4663-1.json"}},{"package":{"name":"xorg-x11-server","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/xorg-x11-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-150400.38.77.1"}]}],"ecosystem_specific":{"binaries":[{"xorg-x11-server":"1.20.3-150400.38.77.1","xorg-x11-server-extra":"1.20.3-150400.38.77.1","xorg-x11-server-sdk":"1.20.3-150400.38.77.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4663-1.json"}}],"schema_version":"1.9.0"}