SUSE-CU-2026:11789-1: Security update of suse/kiosk/xorg-client

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/kiosk/xorg-client
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:11789-1
Container Tags        : suse/kiosk/xorg-client:21 , suse/kiosk/xorg-client:21-81.10 , suse/kiosk/xorg-client:latest
Container Release     : 81.10
Severity              : important
Type                  : security
References            : 1280910 1281653 1281657 1281661 CVE-2026-88806 CVE-2026-94283
                        CVE-2026-94284 CVE-2026-94285 
-----------------------------------------------------------------

The container suse/kiosk/xorg-client was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4502-1
Released:    Mon Oct  5 17:03:47 2026
Summary:     Security update for libX11
Type:        security
Severity:    important
References:  1280910,1281653,1281657,1281661,CVE-2026-88806,CVE-2026-94283,CVE-2026-94284,CVE-2026-94285
This update for libX11 fixes the following issues:

- CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
  (bsc#1281657).
- CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661).


The following package changes have been done:

- libX11-data-1.8.10-150700.4.8.1 updated
- libX11-xcb1-1.8.10-150700.4.8.1 updated
- libX11-6-1.8.10-150700.4.8.1 updated
- container:suse-sle15-15.7-639cc27d64fa2f2a457d7b6d4dbdd89247dbfd872ad438f5a1799fb085c6c720-0 updated