Summary
[1.20.11-34.4]
- CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523
Resolves: https://redhat.atlassian.net/browse/RHEL-278161
Resolves: https://redhat.atlassian.net/browse/RHEL-278164
Resolves: https://redhat.atlassian.net/browse/RHEL-278169
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | xorg-x11-server-common | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-devel | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-source | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-Xdmx | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-Xephyr | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-Xnest | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-Xorg | 0:1.20.11-34.el9_8.4 |
| Oracle Linux · 9 | xorg-x11-server-Xvfb | 0:1.20.11-34.el9_8.4 |
Vulnerabilities 3
-
High 7.8
X.Org Server XKB SetGeometry TextDoodad Double Free
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
-
High 7.8
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.
-
High 7.8
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.