[CLSA-2026:1793109828] libX11: Fix of CVE-2026-88806
Type:
security
Severity:
Important
Release date:
2026-10-27 14:03:58 UTC
Description:
- CVE-2026-88806: A malicious X server could send an XkbGetMap reply whose firstKeyAct+nKeyActs exceeds max_key_code+1, causing an out-of-bounds write in _XkbReadKeyActions.
CVEs fixed:
Updated packages:
  • libX11-1.8.12-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:2c527e805ba920b06c389556bcb211e54d5e3071acf0161e3e93233675f1fc6b
  • libX11-1.8.12-1.el9_8.tuxcare.els1.i686.rpm
    sha:75dad1859256c6034a318ab54fc45ee06bf0b70efefa26f3d839a3f8e5de9163
  • libX11-1.8.12-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:3aea6ebb31cf73b4c7d23dbe9107977130db77dff6176962ae3d1833acf16d0f
  • libX11-common-1.8.12-1.el9_8.tuxcare.els1.noarch.rpm
    sha:021d140cd856b5c734a2f68473751617cdb525d5835f7b3bc06b020ae8837d5a
  • libX11-devel-1.8.12-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:8be69413076b83d8dd2c0ef4324c25fec9ff78a415e39237707890a8acf0cce2
  • libX11-devel-1.8.12-1.el9_8.tuxcare.els1.i686.rpm
    sha:6902b3322c48b59a5be4f4d4fe9a76801568df252da5c332987d4c16fafcd7a4
  • libX11-devel-1.8.12-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:47c71cb6b58e19f76f78fc1c28615d154820a78d61fcde7807e3c4a160bf9639
  • libX11-xcb-1.8.12-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:98706895c0207f7cd286a476a6cfb2f862d53c792de415a5e8ccaa8319c7d8f4
  • libX11-xcb-1.8.12-1.el9_8.tuxcare.els1.i686.rpm
    sha:5de7dc9177ebedbc9015bb46b3b1425b63bb83865542952f285f1b7492f236ba
  • libX11-xcb-1.8.12-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:9ab797abf9afe448e94b9d5c6b2d5f01767189c27eed66d3f8fa10b5564a91ea
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.