[CLSA-2026:1788793963] xorg-x11-server: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-07 15:12:54 UTC
Description:
- CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names - CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking front buffers as booleans
Updated packages:
  • xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:8e2a53cd1b62f2866eab3918ebde762699c953744ca02b4f52cf82809bf5ed8b
  • xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:63b60a6bf26e9cb5f78478f9733175093dc4021046ed155f95cb8aff96e59c13
  • xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:84428c594d35d86a89fbd5403675d44760ddc2826729e4109cf652ca507ddbb8
  • xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:7e6fe650732be3cb063d2e7abe95fa9ce89f6e8c7886b934f95d9759f18f4311
  • xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:2e42d11d897370fbeaa8be9a8e99af85971b26a34e4f7855a70fb2cc9ecb02fb
  • xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:ba877a7149956e0681f8b98298fd144ec005ca5b1404b9db1edbd39502947fb0
  • xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:05eee9d8f336ff35c93ebdbcc8af991a218fdd8fb1dd4163f9fa63a89642ab1b
  • xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els12.i686.rpm
    sha:7039d0466aafe1003e9495d1d084a4102a65be1f59a045fb114575b59ec2926e
  • xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els12.x86_64.rpm
    sha:e7f8e67ff3e3be0f8392aa06c26569c1ee93d45330b5ed4462931fdb175891b6
  • xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els12.noarch.rpm
    sha:6d9d8ec385bf8490089796a5369b3d8a211c3675255fa3136b06a7227287265e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.