Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-34003 (GCVE-0-2026-34003)
Vulnerability from cvelistv5 – Published: 2026-04-23 14:54 – Updated: 2026-06-30 12:09
VLAI
EPSS
Title
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
Summary
A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
38 references
Impacted products
72 products
| Vendor | Product | Version | |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:24.1.5-6.el10_1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:24.1.9-4.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:24.1.5-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION |
Unaffected:
0:1.1.0-25.el6_10.16 , < *
(rpm)
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.20.4-34.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.8.0-36.el7_9.4 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:21.1.3-20.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:1.20.11-28.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:1.15.0-9.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:1.20.10-4.el8_4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:1.11.0-8.el8_4.15 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.20.10-4.el8_4 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.11.0-8.el8_4.15 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:21.1.3-2.el8_6.6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:1.20.11-7.el8_6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:1.12.0-6.el8_6.17 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.12.0-6.el8_6.17 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:21.1.3-2.el8_6.6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:1.20.11-7.el8_6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-2.el8_6.6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-7.el8_6 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:21.1.3-13.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:1.20.11-18.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:1.12.0-15.el8_8.17 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-13.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-18.el8_8 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:1.12.0-15.el8_8.17 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.15.0-6.el9_7.1 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:23.2.7-6.el9_7 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.20.11-33.el9_7 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.15.0-7.el9_8.1 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.20.11-34.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:24.1.9-4.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-5.el9_0 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-13.el9_0 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:1.11.0-22.el9_0.17 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:21.1.3-10.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.20.11-20.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.12.0-14.el9_2.14 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:1.20.11-28.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:22.1.9-8.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:1.13.1-8.el9_4.9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.20.11-33.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:23.2.7-6.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.14.1-10.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) |
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) |
cpe:/o:redhat:rhel_els:6 |
|
| Red Hat | Red Hat Enterprise Linux Server (v. 7 ELS) |
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux Server Optional (v. 7 ELS) |
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 10) |
cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 8) |
cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream AUS (v.8.4) |
cpe:/a:redhat:rhel_aus:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) |
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream AUS (v.8.6) |
cpe:/a:redhat:rhel_aus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.8.6) |
cpe:/a:redhat:rhel_e4s:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) |
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream TUS (v.8.6) |
cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.8.8) |
cpe:/a:redhat:rhel_e4s:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream TUS (v.8.8) |
cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.0) |
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream E4S (v.9.2) |
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v.9.4) |
cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux AppStream (v. 9) |
cpe:/a:redhat:enterprise_linux:9::appstream |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) |
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) |
cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux CRB (v. 8) |
cpe:/a:redhat:enterprise_linux:8::crb |
|
| Red Hat | Red Hat CodeReady Linux Builder EUS (v.9.4) |
cpe:/a:redhat:rhel_eus:9.4::crb |
|
| Red Hat | Red Hat CodeReady Linux Builder EUS (v.9.6) |
cpe:/a:redhat:rhel_eus:9.6::crb |
|
| Red Hat | Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) |
cpe:/a:redhat:enterprise_linux:9::crb |
Date Public
2026-04-23 14:18
Credits
Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-34003",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-23T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-24T03:55:31.996Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CRB (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::crb"
],
"defaultStatus": "affected",
"product": "Red Hat CodeReady Linux Builder EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::crb"
],
"defaultStatus": "affected",
"product": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-23T14:18:00.653Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T12:09:16.440Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-34003"
},
{
"name": "RHBZ#2451113",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34003.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23496"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22456"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20590"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20563"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11352"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19125"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13414"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11656"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23254"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21715"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21718"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21716"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23255"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21742"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21741"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21699"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20562"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20576"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20557"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20575"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20555"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20560"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22424"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20558"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20561"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10739"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11369"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19343"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19344"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:23496: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)"
},
{
"lang": "en",
"value": "RHSA-2026:22456: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:20590: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:20563: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:11352: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19125: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:13414: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:11692: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:11656: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:23254: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:21715: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:24341: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:21718: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:21716: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:23255: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:21742: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:21712: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:21741: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:21699: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:20562: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:20576: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:20557: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:20547: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:20575: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20555: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20560: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:22424: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20558: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20561: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:10739: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:11388: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:11369: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19342: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19343: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19344: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-25T07:19:13.949Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-23T14:18:00.653Z",
"value": "Made public."
}
],
"title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:24.1.5-6.el10_1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:24.1.9-4.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:24.1.5-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.0-25.el6_10.16",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.4-34.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.8.0-36.el7_9.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-20.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream",
"cpe:/a:redhat:enterprise_linux:8::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-28.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.15.0-9.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.10-4.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.11.0-8.el8_4.15",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.10-4.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.11.0-8.el8_4.15",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-7.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-6.el8_6.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-6.el8_6.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-7.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-2.el8_6.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-7.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-13.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-18.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-15.el8_8.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-13.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-18.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-15.el8_8.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.15.0-6.el9_7.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:23.2.7-6.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-33.el9_7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.15.0-7.el9_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-34.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:24.1.9-4.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-5.el9_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-13.el9_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.11.0-22.el9_0.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:21.1.3-10.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-20.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.12.0-14.el9_2.14",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream",
"cpe:/a:redhat:rhel_eus:9.4::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-28.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:22.1.9-8.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.13.1-8.el9_4.9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/a:redhat:rhel_eus:9.6::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.20.11-33.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/a:redhat:rhel_eus:9.6::crb"
],
"defaultStatus": "affected",
"packageName": "xorg-x11-server-Xwayland",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:23.2.7-6.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"packageName": "tigervnc",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.14.1-10.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "xorg-x11-server",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue."
}
],
"datePublic": "2026-04-23T14:18:00.653Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-08T03:20:00.863Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2026:10739",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10739"
},
{
"name": "RHSA-2026:11352",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11352"
},
{
"name": "RHSA-2026:11369",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11369"
},
{
"name": "RHSA-2026:11388",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11388"
},
{
"name": "RHSA-2026:11656",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11656"
},
{
"name": "RHSA-2026:11692",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11692"
},
{
"name": "RHSA-2026:13414",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13414"
},
{
"name": "RHSA-2026:19125",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19125"
},
{
"name": "RHSA-2026:19342",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19342"
},
{
"name": "RHSA-2026:19343",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19343"
},
{
"name": "RHSA-2026:19344",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19344"
},
{
"name": "RHSA-2026:20547",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20547"
},
{
"name": "RHSA-2026:20555",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20555"
},
{
"name": "RHSA-2026:20557",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20557"
},
{
"name": "RHSA-2026:20558",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20558"
},
{
"name": "RHSA-2026:20560",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20560"
},
{
"name": "RHSA-2026:20561",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20561"
},
{
"name": "RHSA-2026:20562",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20562"
},
{
"name": "RHSA-2026:20563",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20563"
},
{
"name": "RHSA-2026:20575",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20575"
},
{
"name": "RHSA-2026:20576",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20576"
},
{
"name": "RHSA-2026:20590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20590"
},
{
"name": "RHSA-2026:21699",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21699"
},
{
"name": "RHSA-2026:21712",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21712"
},
{
"name": "RHSA-2026:21715",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21715"
},
{
"name": "RHSA-2026:21716",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21716"
},
{
"name": "RHSA-2026:21718",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21718"
},
{
"name": "RHSA-2026:21741",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21741"
},
{
"name": "RHSA-2026:21742",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21742"
},
{
"name": "RHSA-2026:22424",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22424"
},
{
"name": "RHSA-2026:22456",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22456"
},
{
"name": "RHSA-2026:23254",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23254"
},
{
"name": "RHSA-2026:23255",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23255"
},
{
"name": "RHSA-2026:23496",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23496"
},
{
"name": "RHSA-2026:24341",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-34003"
},
{
"name": "RHBZ#2451113",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-25T07:19:13.949Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-23T14:18:00.653Z",
"value": "Made public."
}
],
"title": "Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_redhatCweChain": "CWE-125: Out-of-bounds Read"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2026-34003",
"datePublished": "2026-04-23T14:54:05.479Z",
"dateReserved": "2026-03-25T04:53:13.615Z",
"dateUpdated": "2026-06-30T12:09:16.440Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-34003",
"date": "2026-06-30",
"epss": "0.0025",
"percentile": "0.16139"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-34003\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-04-23T16:16:24.920\",\"lastModified\":\"2026-06-30T03:18:50.427\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.\"}],\"affected\":[{\"source\":\"secalert@redhat.com\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"0:24.1.5-6.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:24.1.9-4.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:24.1.5-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"],\"versions\":[{\"version\":\"0:1.1.0-25.el6_10.16\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:1.20.4-34.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:1.8.0-36.el7_9.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-20.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\",\"cpe:/a:redhat:enterprise_linux:8::crb\"],\"versions\":[{\"version\":\"0:1.20.11-28.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"],\"versions\":[{\"version\":\"0:1.15.0-9.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:1.20.10-4.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:1.11.0-8.el8_4.15\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:1.20.10-4.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:1.11.0-8.el8_4.15\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-2.el8_6.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-7.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"],\"versions\":[{\"version\":\"0:1.12.0-6.el8_6.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"],\"versions\":[{\"version\":\"0:1.12.0-6.el8_6.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-2.el8_6.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-7.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-2.el8_6.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-7.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-13.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-18.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:1.12.0-15.el8_8.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-13.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-18.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:1.12.0-15.el8_8.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"],\"versions\":[{\"version\":\"0:1.15.0-6.el9_7.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\"],\"versions\":[{\"version\":\"0:23.2.7-6.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\"],\"versions\":[{\"version\":\"0:1.20.11-33.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"],\"versions\":[{\"version\":\"0:1.15.0-7.el9_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\"],\"versions\":[{\"version\":\"0:1.20.11-34.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\"],\"versions\":[{\"version\":\"0:24.1.9-4.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-5.el9_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-13.el9_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"],\"versions\":[{\"version\":\"0:1.11.0-22.el9_0.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"],\"versions\":[{\"version\":\"0:21.1.3-10.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"],\"versions\":[{\"version\":\"0:1.20.11-20.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"],\"versions\":[{\"version\":\"0:1.12.0-14.el9_2.14\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\",\"cpe:/a:redhat:rhel_eus:9.4::crb\"],\"versions\":[{\"version\":\"0:1.20.11-28.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"],\"versions\":[{\"version\":\"0:22.1.9-8.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"],\"versions\":[{\"version\":\"0:1.13.1-8.el9_4.9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\",\"cpe:/a:redhat:rhel_eus:9.6::crb\"],\"versions\":[{\"version\":\"0:1.20.11-33.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server-Xwayland\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\",\"cpe:/a:redhat:rhel_eus:9.6::crb\"],\"versions\":[{\"version\":\"0:23.2.7-6.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"tigervnc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"],\"versions\":[{\"version\":\"0:1.14.1-10.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"xorg-x11-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CRB (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat CodeReady Linux Builder EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat CodeReady Linux Builder EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::crb\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-23T00:00:00+00:00\",\"id\":\"CVE-2026-34003\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10739\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11352\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11369\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11388\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11656\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11692\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13414\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19125\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19342\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19343\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19344\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20547\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20555\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20557\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20558\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20560\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20561\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20562\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20563\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20575\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20576\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20590\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21699\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21712\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21715\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21716\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21718\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21741\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21742\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22424\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22456\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23254\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23255\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23496\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24341\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-34003\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2451113\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10739\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11352\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11369\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11656\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13414\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19125\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19343\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19344\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20555\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20557\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20558\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20560\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20561\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20562\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20563\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20575\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20576\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20590\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21699\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21715\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21716\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21718\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21741\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21742\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22424\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22456\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23254\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23255\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23496\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24341\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-34003\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2451113\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34003.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34003\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-23T17:20:40.546545Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-23T17:20:44.391Z\"}}], \"cna\": {\"title\": \"Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.5-6.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.9-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.5-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.0-25.el6_10.16\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.4-34.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.8.0-36.el7_9.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-20.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/a:redhat:enterprise_linux:8::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-28.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-9.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.10-4.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-8.el8_4.15\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.10-4.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-8.el8_4.15\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-7.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-6.el8_6.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-6.el8_6.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-7.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-7.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-13.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-18.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-15.el8_8.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-13.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-18.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-15.el8_8.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-6.el9_7.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.2.7-6.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-33.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-7.el9_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-34.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.9-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-5.el9_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-13.el9_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-22.el9_0.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-10.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-20.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-14.el9_2.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-28.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:22.1.9-8.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.13.1-8.el9_4.9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-33.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.2.7-6.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.14.1-10.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-25T07:19:13.949Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-23T14:18:00.653Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-04-23T14:18:00.653Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:10739\", \"name\": \"RHSA-2026:10739\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11352\", \"name\": \"RHSA-2026:11352\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11369\", \"name\": \"RHSA-2026:11369\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11388\", \"name\": \"RHSA-2026:11388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11656\", \"name\": \"RHSA-2026:11656\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11692\", \"name\": \"RHSA-2026:11692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13414\", \"name\": \"RHSA-2026:13414\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19125\", \"name\": \"RHSA-2026:19125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19342\", \"name\": \"RHSA-2026:19342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19343\", \"name\": \"RHSA-2026:19343\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19344\", \"name\": \"RHSA-2026:19344\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20547\", \"name\": \"RHSA-2026:20547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20555\", \"name\": \"RHSA-2026:20555\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20557\", \"name\": \"RHSA-2026:20557\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20558\", \"name\": \"RHSA-2026:20558\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20560\", \"name\": \"RHSA-2026:20560\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20561\", \"name\": \"RHSA-2026:20561\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20562\", \"name\": \"RHSA-2026:20562\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20563\", \"name\": \"RHSA-2026:20563\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20575\", \"name\": \"RHSA-2026:20575\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20576\", \"name\": \"RHSA-2026:20576\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20590\", \"name\": \"RHSA-2026:20590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21699\", \"name\": \"RHSA-2026:21699\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21712\", \"name\": \"RHSA-2026:21712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21715\", \"name\": \"RHSA-2026:21715\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21716\", \"name\": \"RHSA-2026:21716\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21718\", \"name\": \"RHSA-2026:21718\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21741\", \"name\": \"RHSA-2026:21741\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21742\", \"name\": \"RHSA-2026:21742\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22424\", \"name\": \"RHSA-2026:22424\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22456\", \"name\": \"RHSA-2026:22456\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23254\", \"name\": \"RHSA-2026:23254\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23255\", \"name\": \"RHSA-2026:23255\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23496\", \"name\": \"RHSA-2026:23496\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24341\", \"name\": \"RHSA-2026:24341\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-34003\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2451113\", \"name\": \"RHBZ#2451113\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-06-08T03:20:00.863Z\"}, \"x_redhatCweChain\": \"CWE-125: Out-of-bounds Read\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-34003\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-08T03:20:00.863Z\", \"dateReserved\": \"2026-03-25T04:53:13.615Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-04-23T14:54:05.479Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:24341
Vulnerability from csaf_redhat - Published: 2026-06-08 02:07 - Updated: 2026-06-30 11:48Summary
Red Hat Security Advisory: tigervnc security update
Severity
Important
Notes
Topic: An update for tigervnc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
* xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. (CVE-2026-34000)
* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
* xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling (CVE-2026-34002)
* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)
* TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.
7.8 (High)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.
6.1 (Medium)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.
7.8 (High)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.
6.1 (Medium)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.
7.8 (High)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in TigerVNC's x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service (DoS).
6.3 (Medium)
Affected products
Fixed
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
37 references
Acknowledgments
TrendAI Zero Day Initiative
Jan-Niklas Sohn
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for tigervnc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing. (CVE-2026-34000)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling (CVE-2026-34002)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\n* TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:24341",
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2451106",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
},
{
"category": "external",
"summary": "2451107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451107"
},
{
"category": "external",
"summary": "2451109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
},
{
"category": "external",
"summary": "2451112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451112"
},
{
"category": "external",
"summary": "2451113",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
},
{
"category": "external",
"summary": "2452022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452022"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24341.json"
}
],
"title": "Red Hat Security Advisory: tigervnc security update",
"tracking": {
"current_release_date": "2026-06-30T11:48:09+00:00",
"generator": {
"date": "2026-06-30T11:48:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:24341",
"initial_release_date": "2026-06-08T02:07:09+00:00",
"revision_history": [
{
"date": "2026-06-08T02:07:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-08T02:07:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T11:48:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_aus:8.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tigervnc-0:1.12.0-6.el8_6.17.src",
"product": {
"name": "tigervnc-0:1.12.0-6.el8_6.17.src",
"product_id": "tigervnc-0:1.12.0-6.el8_6.17.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc@1.12.0-6.el8_6.17?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-server@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-server-minimal@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-server-module@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-debugsource@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-server-debuginfo@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.12.0-6.el8_6.17?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product": {
"name": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_id": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.12.0-6.el8_6.17?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"product": {
"name": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"product_id": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-icons@1.12.0-6.el8_6.17?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"product": {
"name": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"product_id": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-license@1.12.0-6.el8_6.17?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"product": {
"name": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"product_id": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tigervnc-selinux@1.12.0-6.el8_6.17?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-0:1.12.0-6.el8_6.17.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src"
},
"product_reference": "tigervnc-0:1.12.0-6.el8_6.17.src",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch"
},
"product_reference": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch"
},
"product_reference": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch"
},
"product_reference": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-0:1.12.0-6.el8_6.17.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src"
},
"product_reference": "tigervnc-0:1.12.0-6.el8_6.17.src",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch"
},
"product_reference": "tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch"
},
"product_reference": "tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch"
},
"product_reference": "tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
},
"product_reference": "tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jan-Niklas Sohn"
],
"organization": "TrendAI Zero Day Initiative"
}
],
"cve": "CVE-2026-33999",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-03-25T06:29:19.544586+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451106"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important integer underflow vulnerability exists in the X.Org X server\u0027s XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "RHBZ#2451106",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33999"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
}
],
"release_date": "2026-04-23T14:11:12.550000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-08T02:07:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling"
},
{
"acknowledgments": [
{
"names": [
"Jan-Niklas Sohn"
],
"organization": "TrendAI Zero Day Initiative"
}
],
"cve": "CVE-2026-34000",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-25T06:37:44.196979+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451107"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This out-of-bounds read vulnerability in the X.Org X server\u0027s XKB geometry processing could allow an attacker to leak memory contents or cause a denial of service. Exploitation requires an attacker to establish a connection to the X11 server, either locally or through forwarded remote sessions. Red Hat Enterprise Linux systems with a graphical environment enabled are potentially affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "RHBZ#2451107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451107"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34000"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34000",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34000"
}
],
"release_date": "2026-05-05T14:01:15.690000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-08T02:07:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict access to the X11 server. On systems where a graphical environment is not required, consider disabling the X server entirely by setting the default system target to multi-user mode. For systems requiring the X server, ensure that X11 forwarding is disabled in SSH configurations if not explicitly needed, and restrict direct X11 connections to trusted users and networks through firewall rules. If changes are made to SSH configuration, the `sshd` service must be restarted. If the default system target is changed, a system reboot is required.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xwayland: xorg: X.Org X server: Information disclosure and denial of service via out-of-bounds read in XKB geometry processing."
},
{
"acknowledgments": [
{
"names": [
"Jan-Niklas Sohn"
],
"organization": "TrendAI Zero Day Initiative"
}
],
"cve": "CVE-2026-34001",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-03-25T07:00:05.329048+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451109"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This use-after-free vulnerability in the X.Org X server\u0027s XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "RHBZ#2451109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001"
}
],
"release_date": "2026-04-23T14:14:42.224000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-08T02:07:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption"
},
{
"acknowledgments": [
{
"names": [
"Jan-Niklas Sohn"
],
"organization": "TrendAI Zero Day Initiative"
}
],
"cve": "CVE-2026-34002",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-03-25T07:09:50.953449+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451112"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This out-of-bounds read vulnerability in the X.Org X server\u0027s XKB modifier map handling could lead to information disclosure or service crashes. An attacker with access to the X11 server can trigger this without user interaction. This affects systems running the X.Org X server.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "RHBZ#2451112",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451112"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34002"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34002",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34002"
}
],
"release_date": "2026-05-05T14:01:46.686000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-08T02:07:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict access to the X11 server. If the X.Org X server is not required on a system, consider disabling or uninstalling it. For systems where the X server is necessary, ensure that access is limited to trusted users and networks. This can involve configuring `xhost` or implementing firewall rules to restrict connections to the X server. Any changes to X server configuration or service status may require a restart of the X server for the mitigation to take effect, which will impact active graphical sessions.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xorg: xwayland: X.Org X server: Information disclosure or Denial of Service via out-of-bounds read in XKB modifier map handling"
},
{
"acknowledgments": [
{
"names": [
"Jan-Niklas Sohn"
],
"organization": "TrendAI Zero Day Initiative"
}
],
"cve": "CVE-2026-34003",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-25T07:19:13.949261+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451113"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important out-of-bounds memory access vulnerability exists in the X.Org X server\u0027s XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "RHBZ#2451113",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34003"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003"
}
],
"release_date": "2026-04-23T14:18:00.653000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-08T02:07:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access"
},
{
"cve": "CVE-2026-34352",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"discovery_date": "2026-03-26T23:01:46.925344+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452022"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in TigerVNC\u0027s x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34352"
},
{
"category": "external",
"summary": "RHBZ#2452022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34352"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34352",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34352"
},
{
"category": "external",
"summary": "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393",
"url": "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393"
},
{
"category": "external",
"summary": "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI",
"url": "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI"
},
{
"category": "external",
"summary": "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2",
"url": "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/03/26/7",
"url": "https://www.openwall.com/lists/oss-security/2026/03/26/7"
}
],
"release_date": "2026-03-26T22:30:46.928000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-08T02:07:09+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
},
{
"category": "workaround",
"details": "The x0vncserver component should be disabled if not actively required. If x0vncserver is necessary, ensure that only trusted users have access to the system where it is running. To disable the x0vncserver service, if it is running as a systemd service, you can use: `sudo systemctl stop x0vncserver.service` `sudo systemctl disable x0vncserver.service` If x0vncserver is launched manually, avoid running it in multi-user environments. A service restart or system reboot may be required for changes to take full effect.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.AUS:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.AUS:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.AUS:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.src",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-debugsource-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-icons-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-license-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-selinux-0:1.12.0-6.el8_6.17.noarch",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-minimal-debuginfo-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-0:1.12.0-6.el8_6.17.x86_64",
"AppStream-8.6.0.Z.EUS.EXTENSION:tigervnc-server-module-debuginfo-0:1.12.0-6.el8_6.17.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions"
}
]
}
SUSE-SU-2026:1328-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:04 - Updated: 2026-04-14 17:04Summary
Security update for xwayland
Severity
Important
Notes
Title of the patch: Security update for xwayland
Description of the patch: This update for xwayland fixes the following issues:
- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1328,SUSE-SLE-Product-WE-15-SP7-2026-1328
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xwayland",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xwayland fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1328,SUSE-SLE-Product-WE-15-SP7-2026-1328",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1328-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1328-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261328-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1328-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045537.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xwayland",
"tracking": {
"current_release_date": "2026-04-14T17:04:46Z",
"generator": {
"date": "2026-04-14T17:04:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1328-1",
"initial_release_date": "2026-04-14T17:04:46Z",
"revision_history": [
{
"date": "2026-04-14T17:04:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.14.1.aarch64",
"product": {
"name": "xwayland-24.1.5-150700.3.14.1.aarch64",
"product_id": "xwayland-24.1.5-150700.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.14.1.aarch64",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.14.1.aarch64",
"product_id": "xwayland-devel-24.1.5-150700.3.14.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.14.1.i586",
"product": {
"name": "xwayland-24.1.5-150700.3.14.1.i586",
"product_id": "xwayland-24.1.5-150700.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.14.1.i586",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.14.1.i586",
"product_id": "xwayland-devel-24.1.5-150700.3.14.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.14.1.ppc64le",
"product": {
"name": "xwayland-24.1.5-150700.3.14.1.ppc64le",
"product_id": "xwayland-24.1.5-150700.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.14.1.ppc64le",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.14.1.ppc64le",
"product_id": "xwayland-devel-24.1.5-150700.3.14.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.14.1.s390x",
"product": {
"name": "xwayland-24.1.5-150700.3.14.1.s390x",
"product_id": "xwayland-24.1.5-150700.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.14.1.s390x",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.14.1.s390x",
"product_id": "xwayland-devel-24.1.5-150700.3.14.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.5-150700.3.14.1.x86_64",
"product": {
"name": "xwayland-24.1.5-150700.3.14.1.x86_64",
"product_id": "xwayland-24.1.5-150700.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.5-150700.3.14.1.x86_64",
"product": {
"name": "xwayland-devel-24.1.5-150700.3.14.1.x86_64",
"product_id": "xwayland-devel-24.1.5-150700.3.14.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.5-150700.3.14.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP7",
"product_id": "SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
},
"product_reference": "xwayland-24.1.5-150700.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:04:46Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:04:46Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:04:46Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:04:46Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Workstation Extension 15 SP7:xwayland-24.1.5-150700.3.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:04:46Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:1329-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:06 - Updated: 2026-04-14 17:06Summary
Security update for xwayland
Severity
Important
Notes
Title of the patch: Security update for xwayland
Description of the patch: This update for xwayland fixes the following issues:
- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1329,openSUSE-SLE-15.6-2026-1329
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xwayland",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xwayland fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1329,openSUSE-SLE-15.6-2026-1329",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1329-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1329-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261329-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1329-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045536.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xwayland",
"tracking": {
"current_release_date": "2026-04-14T17:06:20Z",
"generator": {
"date": "2026-04-14T17:06:20Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1329-1",
"initial_release_date": "2026-04-14T17:06:20Z",
"revision_history": [
{
"date": "2026-04-14T17:06:20Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.23.1.aarch64",
"product": {
"name": "xwayland-24.1.1-150600.5.23.1.aarch64",
"product_id": "xwayland-24.1.1-150600.5.23.1.aarch64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"product_id": "xwayland-devel-24.1.1-150600.5.23.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.23.1.i586",
"product": {
"name": "xwayland-24.1.1-150600.5.23.1.i586",
"product_id": "xwayland-24.1.1-150600.5.23.1.i586"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.23.1.i586",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.i586",
"product_id": "xwayland-devel-24.1.1-150600.5.23.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.23.1.ppc64le",
"product": {
"name": "xwayland-24.1.1-150600.5.23.1.ppc64le",
"product_id": "xwayland-24.1.1-150600.5.23.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"product_id": "xwayland-devel-24.1.1-150600.5.23.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.23.1.s390x",
"product": {
"name": "xwayland-24.1.1-150600.5.23.1.s390x",
"product_id": "xwayland-24.1.1-150600.5.23.1.s390x"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.23.1.s390x",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.s390x",
"product_id": "xwayland-devel-24.1.1-150600.5.23.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.1-150600.5.23.1.x86_64",
"product": {
"name": "xwayland-24.1.1-150600.5.23.1.x86_64",
"product_id": "xwayland-24.1.1-150600.5.23.1.x86_64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.1-150600.5.23.1.x86_64",
"product": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.x86_64",
"product_id": "xwayland-devel-24.1.1-150600.5.23.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.23.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64"
},
"product_reference": "xwayland-24.1.1-150600.5.23.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.23.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le"
},
"product_reference": "xwayland-24.1.1-150600.5.23.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.23.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x"
},
"product_reference": "xwayland-24.1.1-150600.5.23.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.1-150600.5.23.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64"
},
"product_reference": "xwayland-24.1.1-150600.5.23.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.23.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.1-150600.5.23.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
},
"product_reference": "xwayland-devel-24.1.1-150600.5.23.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:06:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:06:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:06:20Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:06:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-24.1.1-150600.5.23.1.x86_64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.aarch64",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.ppc64le",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.s390x",
"openSUSE Leap 15.6:xwayland-devel-24.1.1-150600.5.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:06:20Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:1330-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:08 - Updated: 2026-04-14 17:08Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1330,SUSE-SLE-Module-Basesystem-15-SP7-2026-1330,SUSE-SLE-Module-Development-Tools-15-SP7-2026-1330
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1330,SUSE-SLE-Module-Basesystem-15-SP7-2026-1330,SUSE-SLE-Module-Development-Tools-15-SP7-2026-1330",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1330-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1330-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261330-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1330-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045535.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2026-04-14T17:08:59Z",
"generator": {
"date": "2026-04-14T17:08:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1330-1",
"initial_release_date": "2026-04-14T17:08:59Z",
"revision_history": [
{
"date": "2026-04-14T17:08:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"product_id": "xorg-x11-server-21.1.15-150700.5.16.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.aarch64",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.aarch64",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.16.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.16.1.i586",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.i586",
"product_id": "xorg-x11-server-21.1.15-150700.5.16.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.i586",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.i586",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.i586",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.i586",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.16.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.i586",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.i586",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.i586",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.i586",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.16.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"product_id": "xorg-x11-server-21.1.15-150700.5.16.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.ppc64le",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.16.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"product_id": "xorg-x11-server-21.1.15-150700.5.16.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.s390x",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.s390x",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.16.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"product": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"product_id": "xorg-x11-server-21.1.15-150700.5.16.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"product_id": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"product_id": "xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64",
"product_id": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.x86_64",
"product": {
"name": "xorg-x11-server-source-21.1.15-150700.5.16.1.x86_64",
"product_id": "xorg-x11-server-source-21.1.15-150700.5.16.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.15-150700.5.16.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:08:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:08:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "external",
"summary": "SUSE Bug 1265555 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1265555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:08:59Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:08:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-Xvfb-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:xorg-x11-server-extra-21.1.15-150700.5.16.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:xorg-x11-server-sdk-21.1.15-150700.5.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:08:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:1331-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:11 - Updated: 2026-04-14 17:11Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1331,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1331,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1331,openSUSE-SLE-15.6-2026-1331
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
44 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
44 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
44 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
44 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
44 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1331,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1331,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1331,openSUSE-SLE-15.6-2026-1331",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1331-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1331-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261331-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1331-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045534.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2026-04-14T17:11:37Z",
"generator": {
"date": "2026-04-14T17:11:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1331-1",
"initial_release_date": "2026-04-14T17:11:37Z",
"revision_history": [
{
"date": "2026-04-14T17:11:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"product_id": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.25.1.i586",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.i586",
"product_id": "xorg-x11-server-21.1.11-150600.5.25.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.i586",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.i586",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.i586",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.i586",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.25.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.i586",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.i586",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.i586",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.i586",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.25.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"product_id": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"product_id": "xorg-x11-server-21.1.11-150600.5.25.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.25.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"product": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"product_id": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"product_id": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"product_id": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"product_id": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64",
"product": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64",
"product_id": "xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
},
"product_reference": "xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:11:37Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:11:37Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:11:37Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:11:37Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-Xvfb-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-extra-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-sdk-21.1.11-150600.5.25.1.x86_64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.aarch64",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.ppc64le",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.s390x",
"openSUSE Leap 15.6:xorg-x11-server-source-21.1.11-150600.5.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:11:37Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:1332-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:15 - Updated: 2026-04-14 17:15Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1332,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1332,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1332
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1332,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1332,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1332",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1332-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1332-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261332-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1332-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045533.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2026-04-14T17:15:06Z",
"generator": {
"date": "2026-04-14T17:15:06Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1332-1",
"initial_release_date": "2026-04-14T17:15:06Z",
"revision_history": [
{
"date": "2026-04-14T17:15:06Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.99.1.aarch64",
"product": {
"name": "xorg-x11-server-1.19.6-10.99.1.aarch64",
"product_id": "xorg-x11-server-1.19.6-10.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"product_id": "xorg-x11-server-extra-1.19.6-10.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.aarch64",
"product_id": "xorg-x11-server-sdk-1.19.6-10.99.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.99.1.aarch64",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.99.1.aarch64",
"product_id": "xorg-x11-server-source-1.19.6-10.99.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.99.1.i586",
"product": {
"name": "xorg-x11-server-1.19.6-10.99.1.i586",
"product_id": "xorg-x11-server-1.19.6-10.99.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.99.1.i586",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.i586",
"product_id": "xorg-x11-server-extra-1.19.6-10.99.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.i586",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.i586",
"product_id": "xorg-x11-server-sdk-1.19.6-10.99.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.99.1.i586",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.99.1.i586",
"product_id": "xorg-x11-server-source-1.19.6-10.99.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.99.1.ppc64le",
"product": {
"name": "xorg-x11-server-1.19.6-10.99.1.ppc64le",
"product_id": "xorg-x11-server-1.19.6-10.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"product_id": "xorg-x11-server-extra-1.19.6-10.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.ppc64le",
"product_id": "xorg-x11-server-sdk-1.19.6-10.99.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.99.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.99.1.ppc64le",
"product_id": "xorg-x11-server-source-1.19.6-10.99.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.99.1.s390",
"product": {
"name": "xorg-x11-server-1.19.6-10.99.1.s390",
"product_id": "xorg-x11-server-1.19.6-10.99.1.s390"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.99.1.s390",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.s390",
"product_id": "xorg-x11-server-extra-1.19.6-10.99.1.s390"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.s390",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.s390",
"product_id": "xorg-x11-server-sdk-1.19.6-10.99.1.s390"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.99.1.s390",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.99.1.s390",
"product_id": "xorg-x11-server-source-1.19.6-10.99.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.99.1.s390x",
"product": {
"name": "xorg-x11-server-1.19.6-10.99.1.s390x",
"product_id": "xorg-x11-server-1.19.6-10.99.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"product_id": "xorg-x11-server-extra-1.19.6-10.99.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.s390x",
"product_id": "xorg-x11-server-sdk-1.19.6-10.99.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.99.1.s390x",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.99.1.s390x",
"product_id": "xorg-x11-server-source-1.19.6-10.99.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.19.6-10.99.1.x86_64",
"product": {
"name": "xorg-x11-server-1.19.6-10.99.1.x86_64",
"product_id": "xorg-x11-server-1.19.6-10.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"product_id": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.19.6-10.99.1.x86_64",
"product_id": "xorg-x11-server-sdk-1.19.6-10.99.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.19.6-10.99.1.x86_64",
"product": {
"name": "xorg-x11-server-source-1.19.6-10.99.1.x86_64",
"product_id": "xorg-x11-server-source-1.19.6-10.99.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.99.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64"
},
"product_reference": "xorg-x11-server-1.19.6-10.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.99.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.19.6-10.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.99.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x"
},
"product_reference": "xorg-x11-server-1.19.6-10.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.99.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64"
},
"product_reference": "xorg-x11-server-1.19.6-10.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.19.6-10.99.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64"
},
"product_reference": "xorg-x11-server-1.19.6-10.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:15:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:15:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:15:06Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:15:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:xorg-x11-server-extra-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-1.19.6-10.99.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xorg-x11-server-extra-1.19.6-10.99.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:15:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:1333-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:18 - Updated: 2026-04-14 17:18Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1333,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1333,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1333,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1333,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1333
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1333,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1333,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1333,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1333,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1333",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1333-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1333-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261333-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1333-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045532.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2026-04-14T17:18:59Z",
"generator": {
"date": "2026-04-14T17:18:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1333-1",
"initial_release_date": "2026-04-14T17:18:59Z",
"revision_history": [
{
"date": "2026-04-14T17:18:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"product_id": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.aarch64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.aarch64",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.68.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.68.1.i586",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.i586",
"product_id": "xorg-x11-server-1.20.3-150400.38.68.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.i586",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.i586",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.68.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.i586",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.i586",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.i586",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.i586",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.68.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"product_id": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.ppc64le",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.68.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"product_id": "xorg-x11-server-1.20.3-150400.38.68.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.s390x",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.s390x",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.68.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"product": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"product_id": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"product_id": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"product_id": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.x86_64",
"product": {
"name": "xorg-x11-server-source-1.20.3-150400.38.68.1.x86_64",
"product_id": "xorg-x11-server-source-1.20.3-150400.38.68.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:18:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:18:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:18:59Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:18:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-extra-1.20.3-150400.38.68.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:xorg-x11-server-sdk-1.20.3-150400.38.68.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:18:59Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:1335-1
Vulnerability from csaf_suse - Published: 2026-04-14 17:28 - Updated: 2026-04-14 17:28Summary
Security update for xorg-x11-server
Severity
Important
Notes
Title of the patch: Security update for xorg-x11-server
Description of the patch: This update for xorg-x11-server fixes the following issues:
- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-2026-1335,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1335,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1335,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1335,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1335
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xorg-x11-server",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xorg-x11-server fixes the following issues:\n\n- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1335,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1335,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1335,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1335,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1335",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1335-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1335-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261335-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1335-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045531.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xorg-x11-server",
"tracking": {
"current_release_date": "2026-04-14T17:28:43Z",
"generator": {
"date": "2026-04-14T17:28:43Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1335-1",
"initial_release_date": "2026-04-14T17:28:43Z",
"revision_history": [
{
"date": "2026-04-14T17:28:43Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"product_id": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.aarch64",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.aarch64",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.46.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.46.1.i586",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.i586",
"product_id": "xorg-x11-server-21.1.4-150500.7.46.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.i586",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.i586",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.i586",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.i586",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.46.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.i586",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.i586",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.i586"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.i586",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.i586",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.46.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"product_id": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.ppc64le",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.ppc64le",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.46.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"product_id": "xorg-x11-server-21.1.4-150500.7.46.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.s390x",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.s390x",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.46.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"product": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"product_id": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"product_id": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"product": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"product_id": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"product": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"product_id": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
}
},
{
"category": "product_version",
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.x86_64",
"product": {
"name": "xorg-x11-server-source-21.1.4-150500.7.46.1.x86_64",
"product_id": "xorg-x11-server-source-21.1.4-150500.7.46.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
},
"product_reference": "xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:28:43Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:28:43Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:28:43Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:28:43Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-Xvfb-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-extra-21.1.4-150500.7.46.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:xorg-x11-server-sdk-21.1.4-150500.7.46.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-14T17:28:43Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
SUSE-SU-2026:21211-1
Vulnerability from csaf_suse - Published: 2026-04-17 07:57 - Updated: 2026-04-17 07:57Summary
Security update for xwayland
Severity
Important
Notes
Title of the patch: Security update for xwayland
Description of the patch: This update for xwayland fixes the following issues:
- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).
- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).
- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).
- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).
- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).
Patchnames: SUSE-SLES-16.0-583
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xwayland",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xwayland fixes the following issues:\n\n- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).\n- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).\n- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).\n- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).\n- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-583",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21211-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:21211-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202621211-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:21211-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025518.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260922",
"url": "https://bugzilla.suse.com/1260922"
},
{
"category": "self",
"summary": "SUSE Bug 1260923",
"url": "https://bugzilla.suse.com/1260923"
},
{
"category": "self",
"summary": "SUSE Bug 1260924",
"url": "https://bugzilla.suse.com/1260924"
},
{
"category": "self",
"summary": "SUSE Bug 1260925",
"url": "https://bugzilla.suse.com/1260925"
},
{
"category": "self",
"summary": "SUSE Bug 1260926",
"url": "https://bugzilla.suse.com/1260926"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33999 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34001 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34002 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34003 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34003/"
}
],
"title": "Security update for xwayland",
"tracking": {
"current_release_date": "2026-04-17T07:57:47Z",
"generator": {
"date": "2026-04-17T07:57:47Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:21211-1",
"initial_release_date": "2026-04-17T07:57:47Z",
"revision_history": [
{
"date": "2026-04-17T07:57:47Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.6-160000.4.1.aarch64",
"product": {
"name": "xwayland-24.1.6-160000.4.1.aarch64",
"product_id": "xwayland-24.1.6-160000.4.1.aarch64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.6-160000.4.1.aarch64",
"product": {
"name": "xwayland-devel-24.1.6-160000.4.1.aarch64",
"product_id": "xwayland-devel-24.1.6-160000.4.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.6-160000.4.1.ppc64le",
"product": {
"name": "xwayland-24.1.6-160000.4.1.ppc64le",
"product_id": "xwayland-24.1.6-160000.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.6-160000.4.1.ppc64le",
"product": {
"name": "xwayland-devel-24.1.6-160000.4.1.ppc64le",
"product_id": "xwayland-devel-24.1.6-160000.4.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.6-160000.4.1.s390x",
"product": {
"name": "xwayland-24.1.6-160000.4.1.s390x",
"product_id": "xwayland-24.1.6-160000.4.1.s390x"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.6-160000.4.1.s390x",
"product": {
"name": "xwayland-devel-24.1.6-160000.4.1.s390x",
"product_id": "xwayland-devel-24.1.6-160000.4.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xwayland-24.1.6-160000.4.1.x86_64",
"product": {
"name": "xwayland-24.1.6-160000.4.1.x86_64",
"product_id": "xwayland-24.1.6-160000.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "xwayland-devel-24.1.6-160000.4.1.x86_64",
"product": {
"name": "xwayland-devel-24.1.6-160000.4.1.x86_64",
"product_id": "xwayland-devel-24.1.6-160000.4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64"
},
"product_reference": "xwayland-24.1.6-160000.4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le"
},
"product_reference": "xwayland-24.1.6-160000.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x"
},
"product_reference": "xwayland-24.1.6-160000.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64"
},
"product_reference": "xwayland-24.1.6-160000.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64"
},
"product_reference": "xwayland-24.1.6-160000.4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le"
},
"product_reference": "xwayland-24.1.6-160000.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x"
},
"product_reference": "xwayland-24.1.6-160000.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-24.1.6-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64"
},
"product_reference": "xwayland-24.1.6-160000.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xwayland-devel-24.1.6-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
},
"product_reference": "xwayland-devel-24.1.6-160000.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33999"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33999",
"url": "https://www.suse.com/security/cve/CVE-2026-33999"
},
{
"category": "external",
"summary": "SUSE Bug 1260922 for CVE-2026-33999",
"url": "https://bugzilla.suse.com/1260922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-17T07:57:47Z",
"details": "moderate"
}
],
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34000"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34000",
"url": "https://www.suse.com/security/cve/CVE-2026-34000"
},
{
"category": "external",
"summary": "SUSE Bug 1260923 for CVE-2026-34000",
"url": "https://bugzilla.suse.com/1260923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-17T07:57:47Z",
"details": "moderate"
}
],
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34001"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34001",
"url": "https://www.suse.com/security/cve/CVE-2026-34001"
},
{
"category": "external",
"summary": "SUSE Bug 1260924 for CVE-2026-34001",
"url": "https://bugzilla.suse.com/1260924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-17T07:57:47Z",
"details": "important"
}
],
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34002"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34002",
"url": "https://www.suse.com/security/cve/CVE-2026-34002"
},
{
"category": "external",
"summary": "SUSE Bug 1260925 for CVE-2026-34002",
"url": "https://bugzilla.suse.com/1260925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-17T07:57:47Z",
"details": "moderate"
}
],
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34003"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34003",
"url": "https://www.suse.com/security/cve/CVE-2026-34003"
},
{
"category": "external",
"summary": "SUSE Bug 1260926 for CVE-2026-34003",
"url": "https://bugzilla.suse.com/1260926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-24.1.6-160000.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:xwayland-devel-24.1.6-160000.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-17T07:57:47Z",
"details": "moderate"
}
],
"title": "CVE-2026-34003"
}
]
}
WID-SEC-W-2026-1119
Vulnerability from csaf_certbund - Published: 2026-04-14 22:00 - Updated: 2026-06-09 22:00Summary
X.Org X11, Xwayland: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Das X Window System dient der Erzeugung grafischer Oberflächen auf Unix Systemen.
Xwayland ist ein X-Server für die Ausführung von X-Clients unter Wayland Display Servern. Wayland ist ein Ersatz für X.11 Display-Server.
Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, darunter möglicherweise Speicherbeschädigungen, die Offenlegung von Informationen oder einen Denial-of-Service-Zustand.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
Affected products
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
OpenBSD OpenBSD 7.8
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.8
|
7.8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IGEL OS <11.11.150
IGEL / OS
|
<11.11.150 | ||
|
Red Hat Enterprise Linux 9.2
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:9.2
|
9.2 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
OpenBSD OpenBSD <7.7
OpenBSD / OpenBSD
|
<7.7 | ||
|
OpenBSD OpenBSD <7.8
OpenBSD / OpenBSD
|
<7.8 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Open Source X.Org X11 <21.1.22
Open Source / X.Org X11
|
<21.1.22 | ||
|
IGEL OS <12.8.1
IGEL / OS
|
<12.8.1 | ||
|
Open Source Xwayland <24.1.10
Open Source / Xwayland
|
<24.1.10 | ||
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— |
Affected products
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
OpenBSD OpenBSD 7.8
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.8
|
7.8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IGEL OS <11.11.150
IGEL / OS
|
<11.11.150 | ||
|
Red Hat Enterprise Linux 9.2
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:9.2
|
9.2 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
OpenBSD OpenBSD <7.7
OpenBSD / OpenBSD
|
<7.7 | ||
|
OpenBSD OpenBSD <7.8
OpenBSD / OpenBSD
|
<7.8 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Open Source X.Org X11 <21.1.22
Open Source / X.Org X11
|
<21.1.22 | ||
|
IGEL OS <12.8.1
IGEL / OS
|
<12.8.1 | ||
|
Open Source Xwayland <24.1.10
Open Source / Xwayland
|
<24.1.10 | ||
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— |
Affected products
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
OpenBSD OpenBSD 7.8
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.8
|
7.8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IGEL OS <11.11.150
IGEL / OS
|
<11.11.150 | ||
|
Red Hat Enterprise Linux 9.2
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:9.2
|
9.2 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
OpenBSD OpenBSD <7.7
OpenBSD / OpenBSD
|
<7.7 | ||
|
OpenBSD OpenBSD <7.8
OpenBSD / OpenBSD
|
<7.8 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Open Source X.Org X11 <21.1.22
Open Source / X.Org X11
|
<21.1.22 | ||
|
IGEL OS <12.8.1
IGEL / OS
|
<12.8.1 | ||
|
Open Source Xwayland <24.1.10
Open Source / Xwayland
|
<24.1.10 | ||
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— |
Affected products
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
OpenBSD OpenBSD 7.8
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.8
|
7.8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IGEL OS <11.11.150
IGEL / OS
|
<11.11.150 | ||
|
Red Hat Enterprise Linux 9.2
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:9.2
|
9.2 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
OpenBSD OpenBSD <7.7
OpenBSD / OpenBSD
|
<7.7 | ||
|
OpenBSD OpenBSD <7.8
OpenBSD / OpenBSD
|
<7.8 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Open Source X.Org X11 <21.1.22
Open Source / X.Org X11
|
<21.1.22 | ||
|
IGEL OS <12.8.1
IGEL / OS
|
<12.8.1 | ||
|
Open Source Xwayland <24.1.10
Open Source / Xwayland
|
<24.1.10 | ||
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— |
Affected products
Known affected
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
OpenBSD OpenBSD 7.8
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.8
|
7.8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IGEL OS <11.11.150
IGEL / OS
|
<11.11.150 | ||
|
Red Hat Enterprise Linux 9.2
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:9.2
|
9.2 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
OpenBSD OpenBSD <7.7
OpenBSD / OpenBSD
|
<7.7 | ||
|
OpenBSD OpenBSD <7.8
OpenBSD / OpenBSD
|
<7.8 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Open Source X.Org X11 <21.1.22
Open Source / X.Org X11
|
<21.1.22 | ||
|
IGEL OS <12.8.1
IGEL / OS
|
<12.8.1 | ||
|
Open Source Xwayland <24.1.10
Open Source / Xwayland
|
<24.1.10 | ||
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— |
References
78 references
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Das X Window System dient der Erzeugung grafischer Oberfl\u00e4chen auf Unix Systemen.\r\nXwayland ist ein X-Server f\u00fcr die Ausf\u00fchrung von X-Clients unter Wayland Display Servern. Wayland ist ein Ersatz f\u00fcr X.11 Display-Server.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um nicht n\u00e4her spezifizierte Angriffe durchzuf\u00fchren, darunter m\u00f6glicherweise Speicherbesch\u00e4digungen, die Offenlegung von Informationen oder einen Denial-of-Service-Zustand.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1119 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1119.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1119 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1119"
},
{
"category": "external",
"summary": "X.Org Security Advisory vom 2026-04-14",
"url": "https://lists.x.org/archives/xorg-announce/2026-April/003677.html"
},
{
"category": "external",
"summary": "xorg-server 21.1.22 announcement vom 2026-04-14",
"url": "https://lists.x.org/archives/xorg-announce/2026-April/003678.html"
},
{
"category": "external",
"summary": "xwayland 24.1.10 announcement vom 2026-04-14",
"url": "https://lists.x.org/archives/xorg-announce/2026-April/003679.html"
},
{
"category": "external",
"summary": "OpenBSD Errata 7.7 vom 2026-04-14",
"url": "https://www.openbsd.org/errata77.html"
},
{
"category": "external",
"summary": "OpenBSD Errata 7.8 vom 2026-04-14",
"url": "https://www.openbsd.org/errata78.html"
},
{
"category": "external",
"summary": "OpenBSD 7.8 Errata vom 2026-04-14",
"url": "http://www.openbsd.org/errata78.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1330-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025341.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-2C6941716B vom 2026-04-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-2c6941716b"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-A7EC361237 vom 2026-04-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a7ec361237"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-922A6D4E1A vom 2026-04-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-922a6d4e1a"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1331-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025340.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1332-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025339.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1329-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025342.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1328-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025343.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-CF9E55A7A0 vom 2026-04-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-cf9e55a7a0"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1335-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025337.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-C0163D5A73 vom 2026-04-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-c0163d5a73"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-BEFF97A194 vom 2026-04-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-beff97a194"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-0B633ECC7C vom 2026-04-16",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0b633ecc7c"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-492E92B32D vom 2026-04-16",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-492e92b32d"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21211-1 vom 2026-04-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025518.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2026:20560-1 vom 2026-04-21",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TN3S4GNYGWSBWV7LFZR6J6U5G5J7VABN/"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2026:20544-1 vom 2026-04-21",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2BCVROV5CUEVEZC4LFOLJZTPMQ6ST7C4/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:10739 vom 2026-04-27",
"url": "https://access.redhat.com/errata/RHSA-2026:10739"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-0174D1953A vom 2026-04-27",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-0174d1953a"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:10739 vom 2026-04-28",
"url": "https://errata.build.resf.org/RLSA-2026:10739"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-10739 vom 2026-04-27",
"url": "https://linux.oracle.com/errata/ELSA-2026-10739.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:11352 vom 2026-04-28",
"url": "https://access.redhat.com/errata/RHSA-2026:11352"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-11369 vom 2026-04-29",
"url": "https://linux.oracle.com/errata/ELSA-2026-11369.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-11352 vom 2026-04-28",
"url": "https://linux.oracle.com/errata/ELSA-2026-11352.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:11388 vom 2026-04-28",
"url": "https://access.redhat.com/errata/RHSA-2026:11388"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:11369 vom 2026-04-28",
"url": "https://access.redhat.com/errata/RHSA-2026:11369"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-11388 vom 2026-04-29",
"url": "https://linux.oracle.com/errata/ELSA-2026-11388.html"
},
{
"category": "external",
"summary": "IGEL Security Notice ISN-2026-15 vom 2026-04-29",
"url": "https://kb.igel.com/en/security-safety/current/isn-2026-15-x-org-vulnerabilities"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:11692 vom 2026-04-29",
"url": "https://access.redhat.com/errata/RHSA-2026:11692"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:11369 vom 2026-04-29",
"url": "https://errata.build.resf.org/RLSA-2026:11369"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:11656 vom 2026-04-29",
"url": "https://access.redhat.com/errata/RHSA-2026:11656"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-11692 vom 2026-04-30",
"url": "https://linux.oracle.com/errata/ELSA-2026-11692.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3273 vom 2026-04-30",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3273.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3268 vom 2026-04-30",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3268.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:11692 vom 2026-04-30",
"url": "https://errata.build.resf.org/RLSA-2026:11692"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-11656 vom 2026-05-01",
"url": "http://linux.oracle.com/errata/ELSA-2026-11656.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:11388 vom 2026-04-30",
"url": "https://errata.build.resf.org/RLSA-2026:11388"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:11352 vom 2026-05-01",
"url": "https://errata.build.resf.org/RLSA-2026:11352"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:11656 vom 2026-04-30",
"url": "https://errata.build.resf.org/RLSA-2026:11656"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:13414 vom 2026-05-04",
"url": "https://access.redhat.com/errata/RHSA-2026:13414"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-13414 vom 2026-05-06",
"url": "https://linux.oracle.com/errata/ELSA-2026-13414.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:13414 vom 2026-05-07",
"url": "https://errata.build.resf.org/RLSA-2026:13414"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19344 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19344"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19343 vom 2026-05-19",
"url": "https://access.redhat.com/errata/RHSA-2026:19343"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19342 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19342"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19125 vom 2026-05-19",
"url": "https://access.redhat.com/errata/RHSA-2026:19125"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20562 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20562"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20576 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20576"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20590 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20590"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20561 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20561"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20575 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20575"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20560 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20560"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20563 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20563"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20547 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20547"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20558 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20558"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20557 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20557"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20555 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20555"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21699 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21699"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21712 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21712"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21715 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21715"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21716 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21716"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21718 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21718"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21741 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21741"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21742 vom 2026-05-28",
"url": "https://access.redhat.com/errata/RHSA-2026:21742"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:22424 vom 2026-06-02",
"url": "https://access.redhat.com/errata/RHSA-2026:22424"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:22456 vom 2026-06-02",
"url": "https://access.redhat.com/errata/RHSA-2026:22456"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23254 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:23254"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23496 vom 2026-06-05",
"url": "https://access.redhat.com/errata/RHSA-2026:23496"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23255 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:23255"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:24341 vom 2026-06-08",
"url": "https://access.redhat.com/errata/RHSA-2026:24341"
}
],
"source_lang": "en-US",
"title": "X.Org X11, Xwayland: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-06-09T22:00:00.000+00:00",
"generator": {
"date": "2026-06-10T07:41:28.069+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1119",
"initial_release_date": "2026-04-14T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-04-14T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-04-15T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2026-04-21T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE und openSUSE aufgenommen"
},
{
"date": "2026-04-23T22:00:00.000+00:00",
"number": "4",
"summary": "Referenz(en) aufgenommen: EUVD-2026-25230, EUVD-2026-25229, EUVD-2026-25231"
},
{
"date": "2026-04-26T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-04-27T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Fedora, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen"
},
{
"date": "2026-04-28T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
},
{
"date": "2026-04-29T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von IGEL, Red Hat, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen"
},
{
"date": "2026-05-03T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen"
},
{
"date": "2026-05-04T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-05T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von European Union Vulnerability Database und Oracle Linux aufgenommen"
},
{
"date": "2026-05-06T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2026-05-19T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-25T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-27T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-28T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-01T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-02T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-04T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-07T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-09T22:00:00.000+00:00",
"number": "21",
"summary": "Referenz(en) aufgenommen: ZDI-26-337, ZDI-CAN-28736, ZDI-26-335, ZDI-CAN-28706, ZDI-26-333, ZDI-CAN-28593, ZDI-26-336, ZDI-CAN-28737, ZDI-26-334, ZDI-CAN-28679"
}
],
"status": "final",
"version": "21"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c12.8.1",
"product": {
"name": "IGEL OS \u003c12.8.1",
"product_id": "T043217"
}
},
{
"category": "product_version",
"name": "12.8.1",
"product": {
"name": "IGEL OS 12.8.1",
"product_id": "T043217-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:igel:os:12.8.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c11.11.150",
"product": {
"name": "IGEL OS \u003c11.11.150",
"product_id": "T053426"
}
},
{
"category": "product_version",
"name": "11.11.150",
"product": {
"name": "IGEL OS 11.11.150",
"product_id": "T053426-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:igel:os:11.11.150"
}
}
}
],
"category": "product_name",
"name": "OS"
}
],
"category": "vendor",
"name": "IGEL"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c21.1.22",
"product": {
"name": "Open Source X.Org X11 \u003c21.1.22",
"product_id": "T052836"
}
},
{
"category": "product_version",
"name": "21.1.22",
"product": {
"name": "Open Source X.Org X11 21.1.22",
"product_id": "T052836-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:x:x.org_x11:21.1.22"
}
}
}
],
"category": "product_name",
"name": "X.Org X11"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c24.1.10",
"product": {
"name": "Open Source Xwayland \u003c24.1.10",
"product_id": "T052837"
}
},
{
"category": "product_version",
"name": "24.1.10",
"product": {
"name": "Open Source Xwayland 24.1.10",
"product_id": "T052837-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:x.org:xwayland:24.1.10"
}
}
}
],
"category": "product_name",
"name": "Xwayland"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "7.8",
"product": {
"name": "OpenBSD OpenBSD 7.8",
"product_id": "T048191",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openbsd:7.8"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.7",
"product": {
"name": "OpenBSD OpenBSD \u003c7.7",
"product_id": "T052838"
}
},
{
"category": "product_version",
"name": "7.7",
"product": {
"name": "OpenBSD OpenBSD 7.7",
"product_id": "T052838-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openbsd:7.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.8",
"product": {
"name": "OpenBSD OpenBSD \u003c7.8",
"product_id": "T052839"
}
},
{
"category": "product_version",
"name": "7.8",
"product": {
"name": "OpenBSD OpenBSD 7.8",
"product_id": "T052839-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openbsd:7.8"
}
}
}
],
"category": "product_name",
"name": "OpenBSD"
}
],
"category": "vendor",
"name": "OpenBSD"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_version",
"name": "9.2",
"product": {
"name": "Red Hat Enterprise Linux 9.2",
"product_id": "T054689",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9.2"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33999",
"product_status": {
"known_affected": [
"T048191",
"67646",
"T053426",
"T054689",
"T004914",
"T032255",
"74185",
"T052838",
"T052839",
"T002207",
"T052836",
"T043217",
"T052837",
"T027843",
"398363"
]
},
"release_date": "2026-04-14T22:00:00.000+00:00",
"title": "CVE-2026-33999"
},
{
"cve": "CVE-2026-34000",
"product_status": {
"known_affected": [
"T048191",
"67646",
"T053426",
"T054689",
"T004914",
"T032255",
"74185",
"T052838",
"T052839",
"T002207",
"T052836",
"T043217",
"T052837",
"T027843",
"398363"
]
},
"release_date": "2026-04-14T22:00:00.000+00:00",
"title": "CVE-2026-34000"
},
{
"cve": "CVE-2026-34001",
"product_status": {
"known_affected": [
"T048191",
"67646",
"T053426",
"T054689",
"T004914",
"T032255",
"74185",
"T052838",
"T052839",
"T002207",
"T052836",
"T043217",
"T052837",
"T027843",
"398363"
]
},
"release_date": "2026-04-14T22:00:00.000+00:00",
"title": "CVE-2026-34001"
},
{
"cve": "CVE-2026-34002",
"product_status": {
"known_affected": [
"T048191",
"67646",
"T053426",
"T054689",
"T004914",
"T032255",
"74185",
"T052838",
"T052839",
"T002207",
"T052836",
"T043217",
"T052837",
"T027843",
"398363"
]
},
"release_date": "2026-04-14T22:00:00.000+00:00",
"title": "CVE-2026-34002"
},
{
"cve": "CVE-2026-34003",
"product_status": {
"known_affected": [
"T048191",
"67646",
"T053426",
"T054689",
"T004914",
"T032255",
"74185",
"T052838",
"T052839",
"T002207",
"T052836",
"T043217",
"T052837",
"T027843",
"398363"
]
},
"release_date": "2026-04-14T22:00:00.000+00:00",
"title": "CVE-2026-34003"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…