[ALSA-2026:85191] Important: xorg-x11-server-Xwayland security update
Type:
security
Severity:
important
Release date:
2026-10-20
Description:
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling (CVE-2026-93516) * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests (CVE-2026-93521) * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling (CVE-2026-88812) * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice (CVE-2026-93523) * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes (CVE-2026-93522) * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow (CVE-2026-93517) * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard mapping resize (CVE-2026-93518) * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor() (CVE-2026-93519) * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.4.aarch64.rpm 00d02aa8d7ac6e081730fca80c496ff256f279bf3447a0db518fabb6bb63029a
aarch64 xorg-x11-server-Xwayland-24.1.9-4.el10_2.4.aarch64.rpm a9fbe77100e9ba8f427880b8a71d3270d2920279ebcfad0aba76f2d265322fef
ppc64le xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.4.ppc64le.rpm 78161b059c28bb6370c25f26198d74c5a02bc663e3864e253ea66981a8f2dcf9
ppc64le xorg-x11-server-Xwayland-24.1.9-4.el10_2.4.ppc64le.rpm 7aa7fdb9a9feb85591cfffbd24a8186191d4eeb92de5b9117b2503cfdbed1fab
s390x xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.4.s390x.rpm 775df7f2d4c9f7da10b41386d4ef3782b3010052e009629c4515ab7b7d447e66
s390x xorg-x11-server-Xwayland-24.1.9-4.el10_2.4.s390x.rpm beddb2d1f184e13324584c3f01b31111ac8292c1335a0245480bc560902d82e9
x86_64 xorg-x11-server-Xwayland-24.1.9-4.el10_2.4.x86_64.rpm c3e9b97aca5492cd10e01d0d4395ec4eb249456ef9cc4c3d4fe48e249850cff5
x86_64 xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.4.x86_64.rpm f7fd9c152db52cec6f9502d662ea86ac38e71b2a4e5d2d8fe1f941834d45b720
x86_64_v2 xorg-x11-server-Xwayland-devel-24.1.9-4.el10_2.4.x86_64_v2.rpm 1291526e894a844bda54c5fff4f2b55aac4e77817904d90f667637397e103100
x86_64_v2 xorg-x11-server-Xwayland-24.1.9-4.el10_2.4.x86_64_v2.rpm 3002336f40b543536b6bab29a0fa90957d9f2c412e08e06e2eab455e7ff44835
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.