Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libX11 may let attackers read or corrupt memory
published 1 month ago
Summary
The libX11 library used by SUSE systems has several flaws that could let a malicious program read data it shouldn't or overwrite memory, potentially causing crashes or allowing further attacks. This risk affects any software that relies on libX11 for X Window System functions. Apply the latest libX11 update from SUSE as soon as possible to close these gaps.
What to do
- Update suse libx11 to version 1.8.7-150600.3.11.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Server 15 SP6-LTSS | suse | libx11 |
< 1.8.7-150600.3.11.1 Fix: upgrade to 1.8.7-150600.3.11.1
|
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | suse | libx11 |
< 1.8.7-150600.3.11.1 Fix: upgrade to 1.8.7-150600.3.11.1
|
Original advisory text
Security update for libX11
This update for libX11 fixes the following issues:
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
(bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
(bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20264501-1/ Vendor Advisory
- https://bugzilla.suse.com/1280910 Third Party Advisory
- https://bugzilla.suse.com/1281653 Third Party Advisory
- https://bugzilla.suse.com/1281657 Third Party Advisory
- https://bugzilla.suse.com/1281661 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-88806 URL
- https://www.suse.com/security/cve/CVE-2026-94283 URL
- https://www.suse.com/security/cve/CVE-2026-94284 URL
- https://www.suse.com/security/cve/CVE-2026-94285 URL
Timeline
Published5 Oct 2026
Updated6 Oct 2026
First seen6 Oct 2026
Sources
SUSE-SU-2026:4501-1 · OSV
Track software like this
Free during beta