SUSE: 2026:2225-1: important: Security update for xorg-x11

Back Linuxsecurity

SUSE: 2026:2225-1: important: Security update for xorg-x11

Linuxsecurity •LinuxSecurity Advisories • June 2, 2026

Share: View original

## This update for xorg-x11-server fixes the following issues * CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) * DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. (bsc#1266302) * Font Alias Stack-based Buffer Overflow. (bsc#1266294) * GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) * XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) * XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) * XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) * XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) * XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

## This update for xorg-x11-server fixes the following issues * CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) * DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. (bsc#1266302) * Font Alias Stack-based Buffer Overflow. (bsc#1266294) * GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) * XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) * XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) * XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) * XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) * XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

* Basesystem Module 15-SP7

* Development Tools Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that has nine security fixes can now be installed.

*

*

*

*

*

*

Announcement ID: SUSE-SU-2026:2225-1 Release Date: 2026-06-02T08:42:21Z Rating: important

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases Multiple Security Updates for xorg-x11 with Critical Vulnerabilities On June 2, 2026, SUSE announced three important security updates for the xorg-x11-server, identified as SUSE-SU-2026:2224-1, SUSE-SU-2026:2225-1, and SUSE-SU-2026:2226-1. Each update addresses nine critical vulnerabilities, including a Use-After-Free Information Disclosure and multiple stack-based buffer overflows. The vulnerabilities affect various SUSE Linux Enterprise products, including High Performance Computing and Server editions. Specific issues include Out-Of-Bounds Writes and Reads, which could lead to unauthorized access or system crashes. Users are advised to apply the patches using recommended installation methods like YaST or zypper. The updates were released simultaneously, indicating a coordinated response to these security threats. No active exploitation has been reported yet, but the vulnerabilities are significant enough to warrant immediate attention. 8 sources 72

Extracted Entities

CWE Weaknesses (4)

Cwe-125 - Out-of-bounds Read CWE-200 - Exposure of Sensitive Information Cwe-416 - Use After Free Cwe-787 - Out-of-bounds Write

Platforms (1)

SUSE Linux Enterprise Server