Skip to content
OpenAdvisories
Medium RHSA-2026:79278 3 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 10, 2026 · Updated Oct 10, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 libX11 0:1.8.13-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libX11-common 0:1.8.13-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libX11-devel 0:1.8.13-3.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libX11-xcb 0:1.8.13-3.1.hum1

Vulnerabilities 3

  • Medium 6.5
    CVE-2026-94283

    Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser

    An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

    X.Org libX11 libx11 libx11 Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2026-94284

    Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser

    An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

    X.Org libX11 libx11 libx11 Debian Ubuntu Azure Linux Alpine
  • Medium 5.1
    CVE-2026-94285

    Out-of-bounds read in libX11's byte-oriented codeset parser

    An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.

    X.Org libX11 libx11 libx11 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-94284
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-94285
  • report
    https://access.redhat.com/security/cve/CVE-2026-94283
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79278.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2542367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-94283
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-94283
  • article
    https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit_id=42d0303f243002a9856c76060569a61893c670dd
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2542378
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-94284
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-94284
  • article
    https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit_id=1b7904002d212eed40949ccf4e8e7156f9fec0e2
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2542376
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-94285
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-94285
  • article
    https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit_id=980868483446f24f9658d26aa5bfa42f3da6dd3a