SUSE-SU-2026:1333-1
SUSE-SU-2026:1333-1 · Security update for xorg-x11-server
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924). - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925). - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.68.1
Update to 1.20.3-150400.38.68.1
xorg-x11-server SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.68.1
Update to 1.20.3-150400.38.68.1
xorg-x11-server SUSE:Linux Enterprise Server 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.68.1
Update to 1.20.3-150400.38.68.1
xorg-x11-server SUSE:Linux Enterprise Server for SAP Applications 15 SP4
- Affected ranges
- ECOSYSTEM: < 1.20.3-150400.38.68.1
Update to 1.20.3-150400.38.68.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20261333-1/
- https://bugzilla.suse.com/1260922
- https://bugzilla.suse.com/1260923
- https://bugzilla.suse.com/1260924
- https://bugzilla.suse.com/1260925
- https://bugzilla.suse.com/1260926
- https://www.suse.com/security/cve/CVE-2026-33999
- https://www.suse.com/security/cve/CVE-2026-34000
- https://www.suse.com/security/cve/CVE-2026-34001
- https://www.suse.com/security/cve/CVE-2026-34002
- https://www.suse.com/security/cve/CVE-2026-34003
- https://osv.dev/vulnerability/SUSE-SU-2026:1333-1