Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-88807: A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libXrender | 0:0.9.11-6.amzn2023.0.2 |
| Amazon Linux · 2023 | libXrender-debuginfo | 0:0.9.11-6.amzn2023.0.2 |
| Amazon Linux · 2023 | libXrender-debugsource | 0:0.9.11-6.amzn2023.0.2 |
| Amazon Linux · 2023 | libXrender-devel | 0:0.9.11-6.amzn2023.0.2 |
Vulnerabilities 1
-
High 8.9
libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-88807.html