USN-8913-1: libx11 vulnerabilities
Ubuntu patched libX11 flaws that let a malicious X server crash clients or possibly run code.
Ubuntu published USN-8913-1 for multiple libX11 vulnerabilities. CVE-2026-88806 is an incorrect handling of XKB keyboard map replies; a user tricked into connecting to a malicious X server could crash libX11 or possibly allow arbitrary code execution. CVE-2026-94283 and CVE-2026-94284 concern X Input Method messages that can likewise crash libX11 and cause a denial of service under the same condition. The notice does not report active exploitation.
36