SUSE-SU-2026:2789-1

Details

Description of the patch:

This update for xorg-x11-server fixes the following issues

CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893).
CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).

Affected Packages

xorg-x11-server

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

1.20.3-150400.38.74.1

xorg-x11-server-extra

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

1.20.3-150400.38.74.1

xorg-x11-server-sdk

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

1.20.3-150400.38.74.1

References

ADVISORY

https://bugzilla.suse.com/1268893

ADVISORY

https://bugzilla.suse.com/1268894

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-July/027322.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-55999/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-56000/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262789-1/