Advisories ยป MGASA-2026-0529

Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

Publication date: 20 Oct 2026
Modification date: 20 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-88812 , CVE-2026-93515 , CVE-2026-93516 , CVE-2026-93517 , CVE-2026-93518 , CVE-2026-93519 , CVE-2026-93520 , CVE-2026-93521 , CVE-2026-93522 , CVE-2026-93523 , CVE-2026-93524 , CVE-2026-93536

Description

XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812)
Present Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515)
XInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516)
GLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517)
XKB ResizeKeyType Numeric Truncation. (CVE-2026-93518)
XFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519)
XKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520)
RandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521)
Glamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522)
XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write.
(CVE-2026-93523)
XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read.
(CVE-2026-93524)
GestureBuildSprite Use-After-Free. (CVE-2026-93536)

References

SRPMS

10/core