Summary
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.
Security Fix(es):
* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | xorg-x11-server-common | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-devel | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-source | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-Xdmx | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-Xephyr | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-Xnest | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-Xorg | 1.20.11-28.el8_10.6 |
| AlmaLinux · 8 | xorg-x11-server-Xvfb | 1.20.11-28.el8_10.6 |
Vulnerabilities 1
-
High 7.8
X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server c…