SUSE xorg-x11-server Important Security Update 2026-2221

Back Linuxsecurity

SUSE xorg-x11-server Important Security Update 2026-2221

Linuxsecurity •LinuxSecurity Advisories • June 2, 2026

Share: View original

## This update for xorg-x11-server fixes the following issues * CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) * DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. (bsc#1266302) * Font Alias Stack-based Buffer Overflow. (bsc#1266294) * GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) * XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) * XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) * XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) * XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) * XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

## This update for xorg-x11-server fixes the following issues * CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) * DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. (bsc#1266302) * Font Alias Stack-based Buffer Overflow. (bsc#1266294) * GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) * XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) * XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) * XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) * XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) * XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that has nine security fixes can now be installed.

*

*

*

*

*

*

Announcement ID: SUSE-SU-2026:2221-1 Release Date: 2026-06-02T08:40:04Z Rating: important

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases Multiple Security Updates for xorg-x11 with Critical Vulnerabilities On June 2, 2026, SUSE announced three important security updates for the xorg-x11-server, identified as SUSE-SU-2026:2224-1, SUSE-SU-2026:2225-1, and SUSE-SU-2026:2226-1. Each update addresses nine critical vulnerabilities, including a Use-After-Free Information Disclosure and multiple stack-based buffer overflows. The vulnerabilities affect various SUSE Linux Enterprise products, including High Performance Computing and Server editions. Specific issues include Out-Of-Bounds Writes and Reads, which could lead to unauthorized access or system crashes. Users are advised to apply the patches using recommended installation methods like YaST or zypper. The updates were released simultaneously, indicating a coordinated response to these security threats. No active exploitation has been reported yet, but the vulnerabilities are significant enough to warrant immediate attention. 8 sources 72

Extracted Entities

Attack Types (1)

CWE Weaknesses (5)

CWE-120 - Classic Buffer Overflow Cwe-125 - Out-of-bounds Read CWE-200 - Exposure of Sensitive Information Cwe-416 - Use After Free Cwe-787 - Out-of-bounds Write

Platforms (2)

SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise Server