RHSA-2026:89747
Vulnerability from csaf_opensuse - Published: 2026-10-26 03:59 - Updated: 2026-10-29 11:00A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch | — |
Vendor Fix
fix
Workaround
|
A flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition—where the software attempts to access memory after it has been freed—by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.
A flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application.
A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS).
A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).
A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.
A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.
A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516)\n\n* xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521)\n\n* xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812)\n\n* xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518)\n\n* xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519)\n\n* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:89747",
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2545161",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545161"
},
{
"category": "external",
"summary": "2545164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545164"
},
{
"category": "external",
"summary": "2545174",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545174"
},
{
"category": "external",
"summary": "2545177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545177"
},
{
"category": "external",
"summary": "2545246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545246"
},
{
"category": "external",
"summary": "2545860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545860"
},
{
"category": "external",
"summary": "2545887",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545887"
},
{
"category": "external",
"summary": "2545908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545908"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89747.json"
}
],
"title": "Red Hat Security Advisory: xorg-x11-server security update",
"tracking": {
"current_release_date": "2026-10-29T11:00:09+00:00",
"generator": {
"date": "2026-10-29T11:00:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:89747",
"initial_release_date": "2026-10-26T03:59:28+00:00",
"revision_history": [
{
"date": "2026-10-26T03:59:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-26T03:59:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-29T11:00:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"product": {
"name": "xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"product_id": "xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server@1.20.11-28.el8_10.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-28.el8_10.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"product": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"product_id": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-28.el8_10.5?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"product": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"product_id": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-28.el8_10.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-28.el8_10.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"product": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"product_id": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-28.el8_10.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-28.el8_10.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"product": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"product_id": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-28.el8_10.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-28.el8_10.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_id": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-28.el8_10.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch",
"product": {
"name": "xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch",
"product_id": "xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xorg-x11-server-source@1.20.11-28.el8_10.5?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-0:1.20.11-28.el8_10.5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src"
},
"product_reference": "xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64"
},
"product_reference": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686"
},
"product_reference": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le"
},
"product_reference": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x"
},
"product_reference": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64"
},
"product_reference": "xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
},
"product_reference": "xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-88812",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-10-02T12:58:50.077000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545174"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension (XKB) geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a specially crafted request to the display server. This can cause memory corruption, potentially resulting in a Denial of Service (DoS) or arbitrary code execution with elevated privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an authenticated local user able to connect to the X server or Xwayland display can trigger memory corruption, potentially leading to arbitrary code execution or privilege escalation with the privileges of the running display server. In typical Red Hat Enterprise Linux workstation and desktop environments, the X server or Xwayland runs as part of the user session, limiting the blast radius, though legacy configurations or privileged Xorg deployments could allow full local privilege escalation. Environments running headless servers without active graphical sessions or X11 forwarding are not exposed to this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-88812"
},
{
"category": "external",
"summary": "RHBZ#2545174",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545174"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-88812",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88812"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88812",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88812"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
},
{
"category": "workaround",
"details": "On server systems where a graphical desktop interface is not required, exposure can be mitigated by disabling the graphical display manager or removing optional X11/Xwayland packages.\n\nTo disable the graphical interface and boot into text mode:\n```\nsystemctl set-default multi-user.target\nsystemctl isolate multi-user.target\n```\n\nAlternatively, remove the affected packages if graphical sessions are not utilized:\n```\ndnf remove xorg-x11-server-Xorg xorg-x11-server-Xwayland\n```\n\nCaveats:\nRemoving these packages or switching system targets will disable graphical login, may remove GNOME and related desktop packages via package manager dependencies, and will break graphical desktop functionality. The server will remain fully accessible and usable via local console terminals and remote SSH sessions.\n\nWarning: Executing these commands will immediately terminate all active graphical sessions.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling"
},
{
"cve": "CVE-2026-93516",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-10-02T12:40:02.580000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545161"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. A local user can exploit a use-after-free condition\u2014where the software attempts to access memory after it has been freed\u2014by establishing a passive input grab and removing an input device. When subsequent input events are processed, the server dereferences the dangling device pointer. This flaw can lead to arbitrary code execution or a Denial of Service (DoS) via an X server crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important because an authenticated local user with access to an active X server session can trigger memory corruption, potentially leading to local privilege escalation or a denial of service. The flaw resides in how the X.Org server processes input device removal alongside passive grabs, leaving unmanaged device references that are dereferenced during subsequent pointer event handling. While default desktop configurations on modern Red Hat Enterprise Linux releases utilize Wayland sessions, environments running standalone Xorg server instances remain exposed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93516"
},
{
"category": "external",
"summary": "RHBZ#2545161",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545161"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93516"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93516",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93516"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling"
},
{
"cve": "CVE-2026-93517",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-10-02T15:08:49.539000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. The GLX (OpenGL Extension to the X Window System) interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially crafted request, triggering a heap-based buffer overflow. Successful exploitation can result in arbitrary code execution with the privileges of the X server or cause a Denial of Service (DoS) by crashing the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate impact by Red Hat Product Security because exploitation is restricted to authenticated local users who have an active session connected to an X11 or Xwayland display server. Default headless and server installations of Red Hat Enterprise Linux do not run a graphical server and are inherently unexposed to this flaw. In workstation and desktop environments, the risk is bounded by the requirement of existing local client access, preventing remote or unauthenticated exploitation without prior compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93517"
},
{
"category": "external",
"summary": "RHBZ#2545246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93517"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow"
},
{
"cve": "CVE-2026-93518",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-05T09:42:21.686000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545860"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension (XKB), the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially crafted XKB requests, causing a heap-based buffer overflow. This can result in arbitrary code execution or a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as Moderate impact because exploitation requires an established, authenticated connection from a local client to the display server. While triggering the integer truncation during keyboard mapping reconfiguration can result in memory corruption or service termination, access is constrained to interactive user sessions. Headless server deployments that do not run graphical display services such as Xorg or Xwayland are not exposed to this risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93518"
},
{
"category": "external",
"summary": "RHBZ#2545860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545860"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93518"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93518",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93518"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize"
},
{
"cve": "CVE-2026-93519",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-05T11:29:41.373000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545887"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is evaluated as having a Moderate severity for Red Hat Enterprise Linux because exploitation is restricted to an authenticated local user with access to an active X11 display session, preventing remote exploitation. A local client can trigger memory corruption within the display server by defining a large number of cursor barriers and subsequently generating pointer movement. While this flaw can lead to a crash of the display server or potentially execute code within the context of the running X server process, the blast radius is confined to the local graphical user session.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93519"
},
{
"category": "external",
"summary": "RHBZ#2545887",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545887"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93519"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()"
},
{
"cve": "CVE-2026-93520",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-05T12:53:29+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545908"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. In the X Keyboard Extension (XKB), key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-based buffer overflow. This vulnerability can lead to arbitrary code execution or cause a Denial of Service (DoS) by crashing the X server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having a Moderate severity for Red Hat Enterprise Linux because exploitation requires an established, authenticated connection from a client session to the local display server. Under typical enterprise deployments, Xorg and Xwayland do not listen for unauthenticated network traffic by default, restricting potential attacks to authenticated local users or forwarded sessions. Although a successful exploit may cause memory corruption leading to server crashes or arbitrary code execution within the privileges of the running display server, it cannot be triggered remotely by unauthenticated attackers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93520"
},
{
"category": "external",
"summary": "RHBZ#2545908",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545908"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93520"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93520",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93520"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling"
},
{
"cve": "CVE-2026-93521",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-02T12:53:42.872000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. The X server incorrectly calculates buffer sizes and memory offsets when prepending or appending data to RandR (Resize and Rotate extension) provider properties. A local attacker can exploit this vulnerability by sending specially crafted property update requests, causing memory corruption. This flaw could allow an attacker to escalate privileges or cause a denial of service (DoS) by crashing the X server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because an authenticated local client can trigger memory corruption within the X server to crash the display server or potentially execute arbitrary code with elevated privileges. In Red Hat Enterprise Linux environments, modern desktop sessions default to Wayland, which restricts direct exposure to Xwayland compatibility instances. However, systems actively utilizing traditional Xorg sessions remain exposed to local privilege escalation by any authorized user with access to the X display.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93521"
},
{
"category": "external",
"summary": "RHBZ#2545164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93521",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93521"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93521",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93521"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests"
},
{
"cve": "CVE-2026-93523",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-02T13:01:36.069000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545177"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that can lead to a denial of service (DoS) or potential arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an authenticated local client can trigger heap memory corruption, which may allow local privilege escalation if the display server operates with administrative privileges or cause a denial of service by terminating the session. In standard Red Hat Enterprise Linux deployments using Wayland, the root impact is reduced as XWayland runs within an unprivileged user session; however, legacy Xorg server configurations running as root remain susceptible to full privilege escalation. Headless server installations that do not run graphical display environments are not exposed to this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93523"
},
{
"category": "external",
"summary": "RHBZ#2545177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545177"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93523"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93523",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93523"
}
],
"release_date": "2026-10-07T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T03:59:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89747"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-0:1.20.11-28.el8_10.5.src",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-common-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xnest-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xorg-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debuginfo-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-debugsource-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.i686",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-devel-0:1.20.11-28.el8_10.5.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xorg-x11-server-source-0:1.20.11-28.el8_10.5.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.