Summary
X.Org X11 libXrender runtime library
Security Fix(es):
* libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | libXrender | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debuginfo | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debuginfo | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debuginfo | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debuginfo | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debuginfo | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debugsource | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debugsource | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debugsource | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debugsource | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-debugsource | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-devel | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-devel | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-devel | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-devel | 0:0.9.10-17.el9_9.1 |
| Rocky Linux · 9 | libXrender-devel | 0:0.9.10-17.el9_9.1 |
Vulnerabilities 1
-
High 8.9
libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.