Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter | 0:49.4-5.el10_2.5 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter-common | 0:49.4-5.el10_2.5 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter-debuginfo | 0:49.4-5.el10_2.5 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter-debugsource | 0:49.4-5.el10_2.5 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter-devel | 0:49.4-5.el10_2.5 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter-devel-debuginfo | 0:49.4-5.el10_2.5 |
| Red Hat · RHEL 10.2 EUS enterprise_linux_eus:10.2 | mutter-tests-debuginfo | 0:49.4-5.el10_2.5 |
Vulnerabilities 1
-
High 7.8
Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path
A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progre…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2549511
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99141.json
-
report
https://access.redhat.com/security/cve/CVE-2026-108094
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-108094
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-108094