Skip to content
OpenAdvisories
Medium ELSA-2026-99865 1 CVE

Moderate: xorg-x11-server security update (Oracle Linux 8)

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Oracle Linux

Summary

[1.20.11-28.6]
- Fix-up for CVE-2026-93520
Resolves: https://redhat.atlassian.net/browse/RHEL-299890

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 8 xorg-x11-server-common 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-devel 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-source 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-Xdmx 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-Xephyr 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-Xnest 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-Xorg 0:1.20.11-28.el8_10.6
Oracle Linux · 8 xorg-x11-server-Xvfb 0:1.20.11-28.el8_10.6

Vulnerabilities 1

  • High 7.8
    CVE-2026-93520

    X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

    A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server c…

    X.Org xwayland xorg-x11-server xorg-server Debian Ubuntu Azure Linux Alpine