SUSE alert openSUSE-SU-2026:20896-1 (xorg-x11-server)

From:
             
 
null@suse.de
To:
             
 
security-announce@lists.opensuse.org
Subject:
             
 
openSUSE-SU-2026:20896-1: important: Security update for xorg-x11-server
Date:
             
 
Fri, 05 Jun 2026 17:51:27 +0200
Message-ID:
             
 
<20260605155127.6E0DCFCE4@maintenance.suse.de>
Archive-link:
             
 
Article
openSUSE security update: security update for xorg-x11-server
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:20896-1
Rating: important
References:

  * bsc#1266294
  * bsc#1266295
  * bsc#1266296
  * bsc#1266297
  * bsc#1266298
  * bsc#1266299
  * bsc#1266300
  * bsc#1266301
  * bsc#1266302




Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that has 9 bug fixes can now be installed.

Description:

This update for xorg-x11-server fixes the following issues:

- CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301)
- DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. (bsc#1266302)
- Font Alias Stack-based Buffer Overflow. (bsc#1266294)
- GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300)
- XKB Key Types Stack-based Buffer Overflow. (bsc#1266296)
- XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297)
- XSYNC Use-After-Free in FreeCounter(). (bsc#1266298)
- XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295)
- XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299)


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-882=1

Package List:

- openSUSE Leap 16.0:

  xorg-x11-server-21.1.15-160000.5.1
  xorg-x11-server-Xvfb-21.1.15-160000.5.1
  xorg-x11-server-extra-21.1.15-160000.5.1
  xorg-x11-server-sdk-21.1.15-160000.5.1
  xorg-x11-server-source-21.1.15-160000.5.1
  xorg-x11-server-wrapper-21.1.15-160000.5.1