SUSE-SU-2026:5178-1: Security update for xorg-x11-server

Q: Which flaw types are addressed by this update?

The update addresses multiple out-of-bounds writes, shared-memory bounds overflow, request and image-size overflows, negative-size validation bypasses, and an invalid negative-size reply condition in X.Org Server components.

Q: Which X.Org Server interfaces are involved?

The affected areas include EDID DS_RANGES handling, XvShmPutImage, XTestFakeInput, XRes QueryResourceBytes and QueryClientIds, glamor Xv image handling, XvPutImage, and XvQueryImageAttributes.

Published Nov 10, 2026

Updated

This update for xorg-x11-server fixes the following issues:

- CVE-2026-109091: X.Org Server EDID DSRANGES Out-Of-Bounds Write (bsc#1285086). - CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow (bsc#1285087). - CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write (bsc#1285088). - CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow (bsc#1285089). - CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow (bsc#1285090). - CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass (bsc#1285091). - CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply (bsc#1285093). - CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow (bsc#1285094).

Affected Software

2 affected componentsFixes available

suse/xorg-x11-server<1.19.6-10.117.1

1.19.6-10.117.1

suse/xorg-x11-server<1.19.6-10.117.1

1.19.6-10.117.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/xorg-x11-server to a version that resolves this vulnerability.
Fixed in 1.19.6-10.117.1

Event History

Nov 10, 2026

Advisory Published

via OSV·05:38 PM

Data Sourced

via OSV·05:38 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which flaw types are addressed by this update?

The update addresses multiple out-of-bounds writes, shared-memory bounds overflow, request and image-size overflows, negative-size validation bypasses, and an invalid negative-size reply condition in X.Org Server components.

Which X.Org Server interfaces are involved?

The affected areas include EDID DS_RANGES handling, XvShmPutImage, XTestFakeInput, XRes QueryResourceBytes and QueryClientIds, glamor Xv image handling, XvPutImage, and XvQueryImageAttributes.

SUSE-SU-2026:5178-1: Security update for xorg-x11-server

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which flaw types are addressed by this update?

Which X.Org Server interfaces are involved?

Company

Resources

Contact

Frequently Asked Questions

Which flaw types are addressed by this update?

Which X.Org Server interfaces are involved?