[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-19slack15.0.txz: Rebuilt. This update fixes security issues: XKB Integer Underflow in XkbSetCompatMap. X...

SUSE-SU-2026:1330-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap bsc1260922. - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom bsc1260923. - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence bsc1260924. - CVE-2026-34002: XKB...

Linux Distros Unpatched Vulnerability : CVE-2026-34002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map handling. An attacker with...

Linux Distros Unpatched Vulnerability : CVE-2026-34003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to a...

Linux Distros Unpatched Vulnerability : CVE-2026-34001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence...

Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2026-104-02)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.22 / 21.1.4 / 24.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-104-02 advisory. New xorg-server packages are available for Slackware 15.0 and -current to fix security...

Linux Distros Unpatched Vulnerability : CVE-2026-33999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local ...

Linux Distros Unpatched Vulnerability : CVE-2026-34000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the CheckSetGeom and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2026-006190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006190 advisory. A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an intege...

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005923)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005923 advisory. A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap- buffer overflow may lead to a privilege escalation vulnerabilit...

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005921 advisory. A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The...

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005919 advisory. A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of...

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005929 advisory. A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with...

AIX : Multiple Vulnerabilities (IJ57162)

The version of AIX installed on the remote host is prior to APAR IJ57162. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57162 advisory. - A flaw was identified in the X.Org X server's X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap...

MiracleLinux 9 : xorg-x11-server-1.20.11-17.el9 (AXSA:2023-5547:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5547:02 advisory. xorg-x11-server: buffer overflow in GetCountedString in xkb/xkb.c CVE-2022-3550 xorg-x11-server: XkbGetKbdByName use-after-free CVE-2022-4283...

MiracleLinux 8 : tigervnc-1.13.1-10.el8 (AXSA:2024-8341:11)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8341:11 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

MiracleLinux 7 : tigervnc-1.8.0-23.el7 (AXSA:2023-4639:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4639:01 advisory. xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free CVE-2022-4283 xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow...

MiracleLinux 9 : tigervnc-1.12.0-5.el9.2 (AXSA:2023-5249:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5249:07 advisory. xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability CVE-2023-1393 Tenable has extracted the preceding...

MiracleLinux 9 : xorg-x11-server-1.20.11-11.el9, xorg-x11-server-Xwayland-21.1.3-3.el9 (AXSA:2023-4916:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4916:01 advisory. xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access CVE-2022-2319 xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo...

MiracleLinux 8 : tigervnc-1.13.1-14.el8_10 (AXSA:2024-9015:15)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9015:15 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block...