Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-common | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-debugsource | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xdmx | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xdmx-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xephyr | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xephyr-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xnest | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xnest-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xorg | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xorg-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xvfb | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | xorg-x11-server-Xvfb-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-debugsource | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-devel | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-source | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-Xdmx-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-Xephyr-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-Xnest-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-Xorg-debuginfo | 0:1.20.11-34.el9_8.4 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | xorg-x11-server-Xvfb-debuginfo | 0:1.20.11-34.el9_8.4 |
Vulnerabilities 3
-
High 7.8
X.Org Server XKB SetGeometry TextDoodad Double Free
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
-
High 7.8
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.
-
High 7.8
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2545164
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2545174
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2545177
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82015.json
-
report
https://access.redhat.com/security/cve/CVE-2026-88812
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-88812
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-88812
-
report
https://access.redhat.com/security/cve/CVE-2026-93521
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-93521
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-93521
-
report
https://access.redhat.com/security/cve/CVE-2026-93523
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-93523
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-93523