{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-50262: fix reversed request length check in GLX\n ChangeDrawableAttributes leading to out-of-bounds read/write\n- CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver\n CreateSaverWindow() after CheckScreenPrivate()\n- CVE-2026-55999: fix heap buffer overflow in glamor_font_get() on fonts with\n per-glyph metrics exceeding maxbounds", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/advisories/2026/clsa-2026_1792138580.json" } ], "tracking": { "current_release_date": "2026-10-22T01:13:31Z", "generator": { "date": "2026-10-22T01:13:31Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792138580", "initial_release_date": "2026-10-16T08:16:21Z", "revision_history": [ { "date": "2026-10-16T08:16:21Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-22T01:13:31Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "xorg-x11-server: Fix of 29 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xwayland@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-common@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xdmx@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xvfb@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xorg@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xnest@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xephyr@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } }, { "category": "product_version", "name": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product": { "name": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_id": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-devel@1.20.4-99.el7_9.tuxcare.els14?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xwayland@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-common@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xdmx@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xvfb@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xorg@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xnest@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-Xephyr@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } }, { "category": "product_version", "name": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product": { "name": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_id": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-devel@1.20.4-99.el7_9.tuxcare.els14?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch", "product": { "name": "xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch", "product_id": "xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/xorg-x11-server-source@1.20.4-99.el7_9.tuxcare.els14?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" }, "product_reference": "xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64" }, "product_reference": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686" }, "product_reference": "xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-26599", "cwe": { "id": "CWE-824", "name": "Access of Uninitialized Pointer" }, "notes": [ { "category": "description", "text": "An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26599" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26599", "url": "https://access.redhat.com/security/cve/CVE-2025-26599" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345253", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345253" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26601", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26601" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26601", "url": "https://access.redhat.com/security/cve/CVE-2025-26601" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345251", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345251" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250516-0004/", "url": "https://security.netapp.com/advisory/ntap-20250516-0004/" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50264", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50264" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50264", "url": "https://access.redhat.com/security/cve/CVE-2026-50264" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485389", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485389" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50264.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50264.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-62229", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-62229" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19432", "url": "https://access.redhat.com/errata/RHSA-2025:19432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19433", "url": "https://access.redhat.com/errata/RHSA-2025:19433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19434", "url": "https://access.redhat.com/errata/RHSA-2025:19434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19435", "url": "https://access.redhat.com/errata/RHSA-2025:19435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19489", "url": "https://access.redhat.com/errata/RHSA-2025:19489" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19623", "url": "https://access.redhat.com/errata/RHSA-2025:19623" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19909", "url": "https://access.redhat.com/errata/RHSA-2025:19909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20958", "url": "https://access.redhat.com/errata/RHSA-2025:20958" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20960", "url": "https://access.redhat.com/errata/RHSA-2025:20960" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20961", "url": "https://access.redhat.com/errata/RHSA-2025:20961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21035", "url": "https://access.redhat.com/errata/RHSA-2025:21035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22040", "url": "https://access.redhat.com/errata/RHSA-2025:22040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22041", "url": "https://access.redhat.com/errata/RHSA-2025:22041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22051", "url": "https://access.redhat.com/errata/RHSA-2025:22051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22055", "url": "https://access.redhat.com/errata/RHSA-2025:22055" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22056", "url": "https://access.redhat.com/errata/RHSA-2025:22056" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22077", "url": "https://access.redhat.com/errata/RHSA-2025:22077" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22096", "url": "https://access.redhat.com/errata/RHSA-2025:22096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22164", "url": "https://access.redhat.com/errata/RHSA-2025:22164" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22167", "url": "https://access.redhat.com/errata/RHSA-2025:22167" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22364", "url": "https://access.redhat.com/errata/RHSA-2025:22364" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22365", "url": "https://access.redhat.com/errata/RHSA-2025:22365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22426", "url": "https://access.redhat.com/errata/RHSA-2025:22426" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22427", "url": "https://access.redhat.com/errata/RHSA-2025:22427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22667", "url": "https://access.redhat.com/errata/RHSA-2025:22667" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22729", "url": "https://access.redhat.com/errata/RHSA-2025:22729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22742", "url": "https://access.redhat.com/errata/RHSA-2025:22742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22753", "url": "https://access.redhat.com/errata/RHSA-2025:22753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0031", "url": "https://access.redhat.com/errata/RHSA-2026:0031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0033", "url": "https://access.redhat.com/errata/RHSA-2026:0033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0034", "url": "https://access.redhat.com/errata/RHSA-2026:0034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0035", "url": "https://access.redhat.com/errata/RHSA-2026:0035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0036", "url": "https://access.redhat.com/errata/RHSA-2026:0036" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-62229", "url": "https://access.redhat.com/security/cve/CVE-2025-62229" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2402649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402649" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html", "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/28/7", "url": "http://www.openwall.com/lists/oss-security/2025/10/28/7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html" } ], "release_date": "2025-10-30T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50256", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alias target name length is 1024 bytes. A font alias name between 257 and 1023 bytes causes the X server to copy that name into the undersized stack buffer without further checks. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50256" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50256", "url": "https://access.redhat.com/security/cve/CVE-2026-50256" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485380", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485380" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50256.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50256.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34001", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34001" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10739", "url": "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11352", "url": "https://access.redhat.com/errata/RHSA-2026:11352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11369", "url": "https://access.redhat.com/errata/RHSA-2026:11369" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11388", "url": "https://access.redhat.com/errata/RHSA-2026:11388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11656", "url": "https://access.redhat.com/errata/RHSA-2026:11656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11692", "url": "https://access.redhat.com/errata/RHSA-2026:11692" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13414", "url": "https://access.redhat.com/errata/RHSA-2026:13414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19125", "url": "https://access.redhat.com/errata/RHSA-2026:19125" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19343", "url": "https://access.redhat.com/errata/RHSA-2026:19343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19344", "url": "https://access.redhat.com/errata/RHSA-2026:19344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34001", "url": "https://access.redhat.com/security/cve/CVE-2026-34001" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json" } ], "release_date": "2026-04-23T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26597", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "notes": [ { "category": "description", "text": "A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because the key actions are of the wrong size.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26597" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26597", "url": "https://access.redhat.com/security/cve/CVE-2025-26597" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345255", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345255" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/06/02/1", "url": "http://www.openwall.com/lists/oss-security/2026/06/02/1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34000", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34000" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34000", "url": "https://access.redhat.com/security/cve/CVE-2026-34000" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451107", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451107" } ], "release_date": "2026-05-05T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50260", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50260" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50260", "url": "https://access.redhat.com/security/cve/CVE-2026-50260" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485385", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485385" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50260.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50260.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-33999", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-33999" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10739", "url": "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11352", "url": "https://access.redhat.com/errata/RHSA-2026:11352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11369", "url": "https://access.redhat.com/errata/RHSA-2026:11369" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11388", "url": "https://access.redhat.com/errata/RHSA-2026:11388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11656", "url": "https://access.redhat.com/errata/RHSA-2026:11656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11692", "url": "https://access.redhat.com/errata/RHSA-2026:11692" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13414", "url": "https://access.redhat.com/errata/RHSA-2026:13414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19125", "url": "https://access.redhat.com/errata/RHSA-2026:19125" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19343", "url": "https://access.redhat.com/errata/RHSA-2026:19343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19344", "url": "https://access.redhat.com/errata/RHSA-2026:19344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33999", "url": "https://access.redhat.com/security/cve/CVE-2026-33999" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json" } ], "release_date": "2026-04-23T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-49180", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-49180" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10258", "url": "https://access.redhat.com/errata/RHSA-2025:10258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10342", "url": "https://access.redhat.com/errata/RHSA-2025:10342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10343", "url": "https://access.redhat.com/errata/RHSA-2025:10343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10344", "url": "https://access.redhat.com/errata/RHSA-2025:10344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10346", "url": "https://access.redhat.com/errata/RHSA-2025:10346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10347", "url": "https://access.redhat.com/errata/RHSA-2025:10347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10348", "url": "https://access.redhat.com/errata/RHSA-2025:10348" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10349", "url": "https://access.redhat.com/errata/RHSA-2025:10349" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10350", "url": "https://access.redhat.com/errata/RHSA-2025:10350" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10351", "url": "https://access.redhat.com/errata/RHSA-2025:10351" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10352", "url": "https://access.redhat.com/errata/RHSA-2025:10352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10355", "url": "https://access.redhat.com/errata/RHSA-2025:10355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10356", "url": "https://access.redhat.com/errata/RHSA-2025:10356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10360", "url": "https://access.redhat.com/errata/RHSA-2025:10360" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10370", "url": "https://access.redhat.com/errata/RHSA-2025:10370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10374", "url": "https://access.redhat.com/errata/RHSA-2025:10374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10375", "url": "https://access.redhat.com/errata/RHSA-2025:10375" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10376", "url": "https://access.redhat.com/errata/RHSA-2025:10376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10377", "url": "https://access.redhat.com/errata/RHSA-2025:10377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10378", "url": "https://access.redhat.com/errata/RHSA-2025:10378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10381", "url": "https://access.redhat.com/errata/RHSA-2025:10381" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10410", "url": "https://access.redhat.com/errata/RHSA-2025:10410" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9303", "url": "https://access.redhat.com/errata/RHSA-2025:9303" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9304", "url": "https://access.redhat.com/errata/RHSA-2025:9304" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9305", "url": "https://access.redhat.com/errata/RHSA-2025:9305" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9306", "url": "https://access.redhat.com/errata/RHSA-2025:9306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9392", "url": "https://access.redhat.com/errata/RHSA-2025:9392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9964", "url": "https://access.redhat.com/errata/RHSA-2025:9964" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-49180", "url": "https://access.redhat.com/security/cve/CVE-2025-49180" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369981", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369981" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/3c3a4b767b16174d3213055947ea7f4f88e10ec6" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html" } ], "release_date": "2025-06-17T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26594", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26594" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26594", "url": "https://access.redhat.com/security/cve/CVE-2025-26594" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345248", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345248" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-49179", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-49179" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10258", "url": "https://access.redhat.com/errata/RHSA-2025:10258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10342", "url": "https://access.redhat.com/errata/RHSA-2025:10342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10343", "url": "https://access.redhat.com/errata/RHSA-2025:10343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10344", "url": "https://access.redhat.com/errata/RHSA-2025:10344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10346", "url": "https://access.redhat.com/errata/RHSA-2025:10346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10347", "url": "https://access.redhat.com/errata/RHSA-2025:10347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10348", "url": "https://access.redhat.com/errata/RHSA-2025:10348" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10349", "url": "https://access.redhat.com/errata/RHSA-2025:10349" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10350", "url": "https://access.redhat.com/errata/RHSA-2025:10350" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10351", "url": "https://access.redhat.com/errata/RHSA-2025:10351" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10352", "url": "https://access.redhat.com/errata/RHSA-2025:10352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10355", "url": "https://access.redhat.com/errata/RHSA-2025:10355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10356", "url": "https://access.redhat.com/errata/RHSA-2025:10356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10360", "url": "https://access.redhat.com/errata/RHSA-2025:10360" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10370", "url": "https://access.redhat.com/errata/RHSA-2025:10370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10374", "url": "https://access.redhat.com/errata/RHSA-2025:10374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10375", "url": "https://access.redhat.com/errata/RHSA-2025:10375" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10376", "url": "https://access.redhat.com/errata/RHSA-2025:10376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10377", "url": "https://access.redhat.com/errata/RHSA-2025:10377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10378", "url": "https://access.redhat.com/errata/RHSA-2025:10378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10381", "url": "https://access.redhat.com/errata/RHSA-2025:10381" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10410", "url": "https://access.redhat.com/errata/RHSA-2025:10410" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9303", "url": "https://access.redhat.com/errata/RHSA-2025:9303" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9304", "url": "https://access.redhat.com/errata/RHSA-2025:9304" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9305", "url": "https://access.redhat.com/errata/RHSA-2025:9305" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9306", "url": "https://access.redhat.com/errata/RHSA-2025:9306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9392", "url": "https://access.redhat.com/errata/RHSA-2025:9392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9964", "url": "https://access.redhat.com/errata/RHSA-2025:9964" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-49179", "url": "https://access.redhat.com/security/cve/CVE-2025-49179" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369978", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369978" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4" }, { "category": "external", "summary": "https://www.x.org/wiki/Development/Security/", "url": "https://www.x.org/wiki/Development/Security/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html" } ], "release_date": "2025-06-17T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50262", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding the request buffer, leading to information disclosure. A write path also exists but requires byte-swapped clients which is disabled by default.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50262" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50262", "url": "https://access.redhat.com/security/cve/CVE-2026-50262" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485387", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485387" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/6d459e4daf715bea8abdafa8fb130be2f8a1d145", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/6d459e4daf715bea8abdafa8fb130be2f8a1d145" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-26600", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26600" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26600", "url": "https://access.redhat.com/security/cve/CVE-2025-26600" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345252", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345252" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20250516-0005/", "url": "https://security.netapp.com/advisory/ntap-20250516-0005/" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34002", "cwe": { "id": "CWE-805", "name": "Buffer Access with Incorrect Length Value" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34002" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34002", "url": "https://access.redhat.com/security/cve/CVE-2026-34002" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451112", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451112" } ], "release_date": "2026-05-05T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2025-26598", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching device ID is found, which can lead to out-of-bounds memory access.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26598" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26598", "url": "https://access.redhat.com/security/cve/CVE-2025-26598" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345254", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345254" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50258", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive shift levels and trigger stack overflows. This is caused by an incomplete fix of CVE-2025-26597. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50258", "url": "https://access.redhat.com/security/cve/CVE-2026-50258" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485383", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485383" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50258.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50258.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50257", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to set up a fence and await that fence, then a second X connection destroys the fence, causing the use-after-free. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50257" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50257", "url": "https://access.redhat.com/security/cve/CVE-2026-50257" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485382", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485382" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50257.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50257.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26595", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26595" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26595", "url": "https://access.redhat.com/security/cve/CVE-2025-26595" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345257", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345257" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-9632", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:10090", "url": "https://access.redhat.com/errata/RHSA-2024:10090" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:8798", "url": "https://access.redhat.com/errata/RHSA-2024:8798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9540", "url": "https://access.redhat.com/errata/RHSA-2024:9540" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9579", "url": "https://access.redhat.com/errata/RHSA-2024:9579" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9601", "url": "https://access.redhat.com/errata/RHSA-2024:9601" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9690", "url": "https://access.redhat.com/errata/RHSA-2024:9690" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9816", "url": "https://access.redhat.com/errata/RHSA-2024:9816" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9818", "url": "https://access.redhat.com/errata/RHSA-2024:9818" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9819", "url": "https://access.redhat.com/errata/RHSA-2024:9819" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9820", "url": "https://access.redhat.com/errata/RHSA-2024:9820" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2024:9901", "url": "https://access.redhat.com/errata/RHSA-2024:9901" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:12751", "url": "https://access.redhat.com/errata/RHSA-2025:12751" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2024-9632", "url": "https://access.redhat.com/security/cve/CVE-2024-9632" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2317233" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2024/Oct/20", "url": "http://seclists.org/fulldisclosure/2024/Oct/20" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/10/29/2", "url": "http://www.openwall.com/lists/oss-security/2024/10/29/2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html", "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00031.html" } ], "release_date": "2024-10-30T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-26596", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), which may lead to a heap-based buffer overflow.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26596" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2500", "url": "https://access.redhat.com/errata/RHSA-2025:2500" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2502", "url": "https://access.redhat.com/errata/RHSA-2025:2502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2861", "url": "https://access.redhat.com/errata/RHSA-2025:2861" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2862", "url": "https://access.redhat.com/errata/RHSA-2025:2862" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2865", "url": "https://access.redhat.com/errata/RHSA-2025:2865" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2866", "url": "https://access.redhat.com/errata/RHSA-2025:2866" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2873", "url": "https://access.redhat.com/errata/RHSA-2025:2873" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2874", "url": "https://access.redhat.com/errata/RHSA-2025:2874" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2875", "url": "https://access.redhat.com/errata/RHSA-2025:2875" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2879", "url": "https://access.redhat.com/errata/RHSA-2025:2879" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:2880", "url": "https://access.redhat.com/errata/RHSA-2025:2880" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:3976", "url": "https://access.redhat.com/errata/RHSA-2025:3976" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7163", "url": "https://access.redhat.com/errata/RHSA-2025:7163" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7165", "url": "https://access.redhat.com/errata/RHSA-2025:7165" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:7458", "url": "https://access.redhat.com/errata/RHSA-2025:7458" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-26596", "url": "https://access.redhat.com/security/cve/CVE-2025-26596" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2345256", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345256" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00036.html" } ], "release_date": "2025-02-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-62231", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-62231" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19432", "url": "https://access.redhat.com/errata/RHSA-2025:19432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19433", "url": "https://access.redhat.com/errata/RHSA-2025:19433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19434", "url": "https://access.redhat.com/errata/RHSA-2025:19434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19435", "url": "https://access.redhat.com/errata/RHSA-2025:19435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19489", "url": "https://access.redhat.com/errata/RHSA-2025:19489" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19623", "url": "https://access.redhat.com/errata/RHSA-2025:19623" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19909", "url": "https://access.redhat.com/errata/RHSA-2025:19909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20958", "url": "https://access.redhat.com/errata/RHSA-2025:20958" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20960", "url": "https://access.redhat.com/errata/RHSA-2025:20960" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20961", "url": "https://access.redhat.com/errata/RHSA-2025:20961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21035", "url": "https://access.redhat.com/errata/RHSA-2025:21035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22040", "url": "https://access.redhat.com/errata/RHSA-2025:22040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22041", "url": "https://access.redhat.com/errata/RHSA-2025:22041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22051", "url": "https://access.redhat.com/errata/RHSA-2025:22051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22055", "url": "https://access.redhat.com/errata/RHSA-2025:22055" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22056", "url": "https://access.redhat.com/errata/RHSA-2025:22056" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22077", "url": "https://access.redhat.com/errata/RHSA-2025:22077" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22096", "url": "https://access.redhat.com/errata/RHSA-2025:22096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22164", "url": "https://access.redhat.com/errata/RHSA-2025:22164" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22167", "url": "https://access.redhat.com/errata/RHSA-2025:22167" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22364", "url": "https://access.redhat.com/errata/RHSA-2025:22364" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22365", "url": "https://access.redhat.com/errata/RHSA-2025:22365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22426", "url": "https://access.redhat.com/errata/RHSA-2025:22426" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22427", "url": "https://access.redhat.com/errata/RHSA-2025:22427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22667", "url": "https://access.redhat.com/errata/RHSA-2025:22667" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22729", "url": "https://access.redhat.com/errata/RHSA-2025:22729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22742", "url": "https://access.redhat.com/errata/RHSA-2025:22742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22753", "url": "https://access.redhat.com/errata/RHSA-2025:22753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0031", "url": "https://access.redhat.com/errata/RHSA-2026:0031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0033", "url": "https://access.redhat.com/errata/RHSA-2026:0033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0034", "url": "https://access.redhat.com/errata/RHSA-2026:0034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0035", "url": "https://access.redhat.com/errata/RHSA-2026:0035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0036", "url": "https://access.redhat.com/errata/RHSA-2026:0036" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-62231", "url": "https://access.redhat.com/security/cve/CVE-2025-62231" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2402660", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402660" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html", "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/28/7", "url": "http://www.openwall.com/lists/oss-security/2025/10/28/7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html" } ], "release_date": "2025-10-30T05:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50261", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50261" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50261", "url": "https://access.redhat.com/security/cve/CVE-2026-50261" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485386", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485386" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50261.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50261.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34003", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34003" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10739", "url": "https://access.redhat.com/errata/RHSA-2026:10739" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11352", "url": "https://access.redhat.com/errata/RHSA-2026:11352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11369", "url": "https://access.redhat.com/errata/RHSA-2026:11369" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11388", "url": "https://access.redhat.com/errata/RHSA-2026:11388" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11656", "url": "https://access.redhat.com/errata/RHSA-2026:11656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11692", "url": "https://access.redhat.com/errata/RHSA-2026:11692" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13414", "url": "https://access.redhat.com/errata/RHSA-2026:13414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19125", "url": "https://access.redhat.com/errata/RHSA-2026:19125" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19342", "url": "https://access.redhat.com/errata/RHSA-2026:19342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19343", "url": "https://access.redhat.com/errata/RHSA-2026:19343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19344", "url": "https://access.redhat.com/errata/RHSA-2026:19344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20547", "url": "https://access.redhat.com/errata/RHSA-2026:20547" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20555", "url": "https://access.redhat.com/errata/RHSA-2026:20555" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20557", "url": "https://access.redhat.com/errata/RHSA-2026:20557" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20558", "url": "https://access.redhat.com/errata/RHSA-2026:20558" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20560", "url": "https://access.redhat.com/errata/RHSA-2026:20560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20561", "url": "https://access.redhat.com/errata/RHSA-2026:20561" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20562", "url": "https://access.redhat.com/errata/RHSA-2026:20562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20563", "url": "https://access.redhat.com/errata/RHSA-2026:20563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20575", "url": "https://access.redhat.com/errata/RHSA-2026:20575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20576", "url": "https://access.redhat.com/errata/RHSA-2026:20576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:20590", "url": "https://access.redhat.com/errata/RHSA-2026:20590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21699", "url": "https://access.redhat.com/errata/RHSA-2026:21699" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21712", "url": "https://access.redhat.com/errata/RHSA-2026:21712" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21715", "url": "https://access.redhat.com/errata/RHSA-2026:21715" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21716", "url": "https://access.redhat.com/errata/RHSA-2026:21716" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21718", "url": "https://access.redhat.com/errata/RHSA-2026:21718" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21741", "url": "https://access.redhat.com/errata/RHSA-2026:21741" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21742", "url": "https://access.redhat.com/errata/RHSA-2026:21742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22424", "url": "https://access.redhat.com/errata/RHSA-2026:22424" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22456", "url": "https://access.redhat.com/errata/RHSA-2026:22456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23254", "url": "https://access.redhat.com/errata/RHSA-2026:23254" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23255", "url": "https://access.redhat.com/errata/RHSA-2026:23255" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:23496", "url": "https://access.redhat.com/errata/RHSA-2026:23496" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:24341", "url": "https://access.redhat.com/errata/RHSA-2026:24341" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34003", "url": "https://access.redhat.com/security/cve/CVE-2026-34003" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34003.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34003.json" } ], "release_date": "2026-04-23T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50263", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50263" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50263", "url": "https://access.redhat.com/security/cve/CVE-2026-50263" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485388", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485388" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-50259", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This may be used to crash the server, or for privilege escalation if the X server runs as root.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50259" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26562", "url": "https://access.redhat.com/errata/RHSA-2026:26562" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26566", "url": "https://access.redhat.com/errata/RHSA-2026:26566" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26590", "url": "https://access.redhat.com/errata/RHSA-2026:26590" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26610", "url": "https://access.redhat.com/errata/RHSA-2026:26610" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:26709", "url": "https://access.redhat.com/errata/RHSA-2026:26709" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28923", "url": "https://access.redhat.com/errata/RHSA-2026:28923" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:29844", "url": "https://access.redhat.com/errata/RHSA-2026:29844" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36083", "url": "https://access.redhat.com/errata/RHSA-2026:36083" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36085", "url": "https://access.redhat.com/errata/RHSA-2026:36085" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36086", "url": "https://access.redhat.com/errata/RHSA-2026:36086" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36087", "url": "https://access.redhat.com/errata/RHSA-2026:36087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36632", "url": "https://access.redhat.com/errata/RHSA-2026:36632" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36633", "url": "https://access.redhat.com/errata/RHSA-2026:36633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36634", "url": "https://access.redhat.com/errata/RHSA-2026:36634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36768", "url": "https://access.redhat.com/errata/RHSA-2026:36768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36791", "url": "https://access.redhat.com/errata/RHSA-2026:36791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36792", "url": "https://access.redhat.com/errata/RHSA-2026:36792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36798", "url": "https://access.redhat.com/errata/RHSA-2026:36798" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38502", "url": "https://access.redhat.com/errata/RHSA-2026:38502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38810", "url": "https://access.redhat.com/errata/RHSA-2026:38810" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46377", "url": "https://access.redhat.com/errata/RHSA-2026:46377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46382", "url": "https://access.redhat.com/errata/RHSA-2026:46382" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46385", "url": "https://access.redhat.com/errata/RHSA-2026:46385" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46392", "url": "https://access.redhat.com/errata/RHSA-2026:46392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46456", "url": "https://access.redhat.com/errata/RHSA-2026:46456" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46460", "url": "https://access.redhat.com/errata/RHSA-2026:46460" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:46473", "url": "https://access.redhat.com/errata/RHSA-2026:46473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49519", "url": "https://access.redhat.com/errata/RHSA-2026:49519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-50259", "url": "https://access.redhat.com/security/cve/CVE-2026-50259" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2485384", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485384" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html", "url": "https://lists.x.org/archives/xorg-announce/2026-June/003702.html" }, { "category": "external", "summary": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950", "url": "https://redhat.atlassian.net/browse/PSIRTSUPT-16950" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50259.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50259.json" } ], "release_date": "2026-06-05T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-62230", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-62230" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19432", "url": "https://access.redhat.com/errata/RHSA-2025:19432" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19433", "url": "https://access.redhat.com/errata/RHSA-2025:19433" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19434", "url": "https://access.redhat.com/errata/RHSA-2025:19434" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19435", "url": "https://access.redhat.com/errata/RHSA-2025:19435" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19489", "url": "https://access.redhat.com/errata/RHSA-2025:19489" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19623", "url": "https://access.redhat.com/errata/RHSA-2025:19623" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19909", "url": "https://access.redhat.com/errata/RHSA-2025:19909" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20958", "url": "https://access.redhat.com/errata/RHSA-2025:20958" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20960", "url": "https://access.redhat.com/errata/RHSA-2025:20960" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20961", "url": "https://access.redhat.com/errata/RHSA-2025:20961" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21035", "url": "https://access.redhat.com/errata/RHSA-2025:21035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22040", "url": "https://access.redhat.com/errata/RHSA-2025:22040" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22041", "url": "https://access.redhat.com/errata/RHSA-2025:22041" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22051", "url": "https://access.redhat.com/errata/RHSA-2025:22051" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22055", "url": "https://access.redhat.com/errata/RHSA-2025:22055" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22056", "url": "https://access.redhat.com/errata/RHSA-2025:22056" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22077", "url": "https://access.redhat.com/errata/RHSA-2025:22077" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22096", "url": "https://access.redhat.com/errata/RHSA-2025:22096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22164", "url": "https://access.redhat.com/errata/RHSA-2025:22164" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22167", "url": "https://access.redhat.com/errata/RHSA-2025:22167" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22364", "url": "https://access.redhat.com/errata/RHSA-2025:22364" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22365", "url": "https://access.redhat.com/errata/RHSA-2025:22365" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22426", "url": "https://access.redhat.com/errata/RHSA-2025:22426" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22427", "url": "https://access.redhat.com/errata/RHSA-2025:22427" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22667", "url": "https://access.redhat.com/errata/RHSA-2025:22667" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22729", "url": "https://access.redhat.com/errata/RHSA-2025:22729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22742", "url": "https://access.redhat.com/errata/RHSA-2025:22742" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22753", "url": "https://access.redhat.com/errata/RHSA-2025:22753" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0031", "url": "https://access.redhat.com/errata/RHSA-2026:0031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0033", "url": "https://access.redhat.com/errata/RHSA-2026:0033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0034", "url": "https://access.redhat.com/errata/RHSA-2026:0034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0035", "url": "https://access.redhat.com/errata/RHSA-2026:0035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0036", "url": "https://access.redhat.com/errata/RHSA-2026:0036" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-62230", "url": "https://access.redhat.com/security/cve/CVE-2025-62230" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2402653", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402653" }, { "category": "external", "summary": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html", "url": "https://lists.x.org/archives/xorg-announce/2025-October/003635.html" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/28/7", "url": "http://www.openwall.com/lists/oss-security/2025/10/28/7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00033.html" } ], "release_date": "2025-10-30T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-49176", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-49176" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10258", "url": "https://access.redhat.com/errata/RHSA-2025:10258" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10342", "url": "https://access.redhat.com/errata/RHSA-2025:10342" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10343", "url": "https://access.redhat.com/errata/RHSA-2025:10343" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10344", "url": "https://access.redhat.com/errata/RHSA-2025:10344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10346", "url": "https://access.redhat.com/errata/RHSA-2025:10346" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10347", "url": "https://access.redhat.com/errata/RHSA-2025:10347" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10348", "url": "https://access.redhat.com/errata/RHSA-2025:10348" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10349", "url": "https://access.redhat.com/errata/RHSA-2025:10349" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10350", "url": "https://access.redhat.com/errata/RHSA-2025:10350" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10351", "url": "https://access.redhat.com/errata/RHSA-2025:10351" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10352", "url": "https://access.redhat.com/errata/RHSA-2025:10352" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10355", "url": "https://access.redhat.com/errata/RHSA-2025:10355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10356", "url": "https://access.redhat.com/errata/RHSA-2025:10356" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10360", "url": "https://access.redhat.com/errata/RHSA-2025:10360" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10370", "url": "https://access.redhat.com/errata/RHSA-2025:10370" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10374", "url": "https://access.redhat.com/errata/RHSA-2025:10374" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10375", "url": "https://access.redhat.com/errata/RHSA-2025:10375" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10376", "url": "https://access.redhat.com/errata/RHSA-2025:10376" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10377", "url": "https://access.redhat.com/errata/RHSA-2025:10377" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10378", "url": "https://access.redhat.com/errata/RHSA-2025:10378" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10381", "url": "https://access.redhat.com/errata/RHSA-2025:10381" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:10410", "url": "https://access.redhat.com/errata/RHSA-2025:10410" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9303", "url": "https://access.redhat.com/errata/RHSA-2025:9303" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9304", "url": "https://access.redhat.com/errata/RHSA-2025:9304" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9305", "url": "https://access.redhat.com/errata/RHSA-2025:9305" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9306", "url": "https://access.redhat.com/errata/RHSA-2025:9306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9392", "url": "https://access.redhat.com/errata/RHSA-2025:9392" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:9964", "url": "https://access.redhat.com/errata/RHSA-2025:9964" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-49176", "url": "https://access.redhat.com/security/cve/CVE-2025-49176" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369954", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369954" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9" }, { "category": "external", "summary": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1", "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1" }, { "category": "external", "summary": "https://www.x.org/wiki/Development/Security/", "url": "https://www.x.org/wiki/Development/Security/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/06/18/2", "url": "http://www.openwall.com/lists/oss-security/2025/06/18/2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html" } ], "release_date": "2025-06-17T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-16T08:16:21.923414Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580", "product_ids": [ "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xdmx-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xephyr-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xnest-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xorg-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xvfb-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-Xwayland-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-common-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.i686", "CloudLinux-7:xorg-x11-server-devel-0:1.20.4-99.el7_9.tuxcare.els14.x86_64", "CloudLinux-7:xorg-x11-server-source-0:1.20.4-99.el7_9.tuxcare.els14.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792138580" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }