[CLSA-2026:1788793700] xorg-x11-server: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-07 15:08:31 UTC
Description:
- CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names - CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking front buffers as booleans
Updated packages:
  • xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:d61b31b8c505d30538988fd3fa9297f553271d0e74fa74df7094cb3be1995d53
  • xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:eeeac33bff412b0aa67e03e51399eb4d68995ddff99d08d6b925cd5ef630d459
  • xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:51a315287b7af6466d5d913c452770da3407f7ba779f9c33709b1ed68fbcc543
  • xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:7a3cab9346445be956a23c663170b6c08d9702c9dbf0574f791a4500286771df
  • xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:12a86fbb49df321fdc110510b68538ad9793758d56a837eebb705cf875b12d7c
  • xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:421f9a48e0b56134a6e93473afb526b6efc78154641af465373e4adbfb3296af
  • xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:b3760921eeab93eda5ddfad4447f1cba33b11f1da1f59c6cfe25298714f575c8
  • xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els12.i686.rpm
    sha:7ced59b7077c942cad3692f541235fdfa5f962d074216873b50439fa2d423743
  • xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:391cb8e990c80fd6c4f14ba10e32a33485f43f6fe789c8710074a39884ff8adc
  • xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els12.noarch.rpm
    sha:5b60eb61f4ab9284fcbda4134224c5d5a2a0b9dabc1efe6aa09025cf6d377ec8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.