X.Org reports:
Multiple issues have been found in the X client library
implementations published by X.Org for which we are
releasing security fixes for.
- CVE-2026-88806: Out-of-bounds write vulnerability in libX11's XKB (X Keyboard Extension) action parser
- CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
- CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser
- CVE-2026-94285: Out-of-bounds read in libX11's byte-oriented codeset parser