Home / mailings [slackware-security] xorg-server (SSA:2026-314-01)
Posted on 11 November 2026
Slackware Security[slackware-security] xorg-server (SSA:2026-314-01)
New xorg-server packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/xorg-server-1.20.14-i586-23_slack15.0.txz: Rebuilt.
This update fixes security issues:
EDID DS_RANGES Out-Of-Bounds Write.
XvShmPutImage Shared-Memory Bounds Overflow.
XTestFakeInput Valuator Stack Out-Of-Bounds Write.
glamor Xv Image Size Integer Overflow.
XvPutImage Negative Image Size Length Bypass.
XvQueryImageAttributes Negative Size Reply.
For more information, see:
https://lists.x.org/archives/xorg-announce/2026-November/003759.html
https://www.cve.org/CVERecord?id=CVE-2026-109091
https://www.cve.org/CVERecord?id=CVE-2026-109092
https://www.cve.org/CVERecord?id=CVE-2026-109093
https://www.cve.org/CVERecord?id=CVE-2026-109095
https://www.cve.org/CVERecord?id=CVE-2026-109096
https://www.cve.org/CVERecord?id=CVE-2026-109903
(* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-i586-23_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-i586-23_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-i586-23_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-i586-21_slack15.0.txz: Rebuilt.
This update fixes security issues:
XvShmPutImage Shared-Memory Bounds Overflow.
XTestFakeInput Valuator Stack Out-Of-Bounds Write.
glamor Xv Image Size Integer Overflow.
XvPutImage Negative Image Size Length Bypass.
XvQueryImageAttributes Negative Size Reply.
For more information, see:
https://lists.x.org/archives/xorg-announce/2026-November/003759.html
https://www.cve.org/CVERecord?id=CVE-2026-109092
https://www.cve.org/CVERecord?id=CVE-2026-109093
https://www.cve.org/CVERecord?id=CVE-2026-109095
https://www.cve.org/CVERecord?id=CVE-2026-109096
https://www.cve.org/CVERecord?id=CVE-2026-109903
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-1.20.14-i586-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xephyr-1.20.14-i586-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xnest-1.20.14-i586-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xvfb-1.20.14-i586-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xwayland-21.1.4-i586-21_slack15.0.txz
Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-1.20.14-x86_64-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xephyr-1.20.14-x86_64-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xnest-1.20.14-x86_64-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xvfb-1.20.14-x86_64-23_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xwayland-21.1.4-x86_64-21_slack15.0.txz
Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-21.1.26-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xephyr-21.1.26-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xnest-21.1.26-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xvfb-21.1.26-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xwayland-24.1.15-i686-1.txz
Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-21.1.26-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xephyr-21.1.26-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xnest-21.1.26-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xvfb-21.1.26-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xwayland-24.1.15-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 packages:
f89a138b01d104c60f0d40e52ea4c744 xorg-server-1.20.14-i586-23_slack15.0.txz
78e230008a5579f970a3b8022823e093 xorg-server-xephyr-1.20.14-i586-23_slack15.0.txz
3eb197d7168907c8fb77904426bb5763 xorg-server-xnest-1.20.14-i586-23_slack15.0.txz
71ad616c07710a424f96ddee03cbffcd xorg-server-xvfb-1.20.14-i586-23_slack15.0.txz
e2a80131bf1327af7a4d0ed15bddbb71 xorg-server-xwayland-21.1.4-i586-21_slack15.0.txz
Slackware x86_64 15.0 packages:
94ade939f0083dcd2aca131a02aab37b xorg-server-1.20.14-x86_64-23_slack15.0.txz
783cc1a4b7411104d33802f5f0926f44 xorg-server-xephyr-1.20.14-x86_64-23_slack15.0.txz
a4b141076684d4cdf80cbc44c686eb27 xorg-server-xnest-1.20.14-x86_64-23_slack15.0.txz
302187e147df12d9f55b0ce81611809d xorg-server-xvfb-1.20.14-x86_64-23_slack15.0.txz
d299ba07a2eca27798111162a03b0ebb xorg-server-xwayland-21.1.4-x86_64-21_slack15.0.txz
Slackware -current packages:
749716e8e9c8eb43731762ea9253bb62 x/xorg-server-21.1.26-i686-1.txz
e546e7dd5da2531b4b5c2d1e2c4812b5 x/xorg-server-xephyr-21.1.26-i686-1.txz
e5b1f2e7aa0d24fcac01c9d40da94b19 x/xorg-server-xnest-21.1.26-i686-1.txz
29154b76915e2c2ec160e5aee75734ce x/xorg-server-xvfb-21.1.26-i686-1.txz
27854eee59fa6edc119cd3f4de7309af x/xorg-server-xwayland-24.1.15-i686-1.txz
Slackware x86_64 -current packages:
32553ddea361b60ed495c60941315f3a x/xorg-server-21.1.26-x86_64-1.txz
d0f1c98749af4dc2a1ee69a057fec0ff x/xorg-server-xephyr-21.1.26-x86_64-1.txz
f2f7e76f4015b017343b316a94f0d638 x/xorg-server-xnest-21.1.26-x86_64-1.txz
eaffbd5f1735bdbe2fe44074bc6e3fa5 x/xorg-server-xvfb-21.1.26-x86_64-1.txz
4aa9a04c5a759cdbc357f3b7a460a19f x/xorg-server-xwayland-24.1.15-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg xorg-server-*.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
