{"id":"CVE-2026-50263","aliases":["ALSA-2026:26562","ALSA-2026:26566","ALSA-2026:26590","ALSA-2026:26610","ALSA-2026:26709","ALSA-2026:28923","ALSA-2026:29844","AZL-89534","AZL-89589","BELL-CVE-2026-50263","CLSA-2026-1782224017","CLSA-2026-1782484404","CLSA-2026-1782812906","CLSA-2026-1783338681","CLSA-2026-1790583885","CLSA-2026-1790584501","CLSA-2026-1790585169","CLSA-2026-1790608489","CLSA-2026-1791120339","DEBIAN-CVE-2026-50263","EUVD-2026-34820","GHSA-4ph5-83mw-vm42","OESA-2026-2681","OESA-2026-4480","OESA-2026-4481","OESA-2026-4482","OESA-2026-4483","RHSA-2026:26562","RHSA-2026:26566","RHSA-2026:26590","RHSA-2026:26610","RHSA-2026:26709","RHSA-2026:28923","RHSA-2026:29844","RHSA-2026:36083","RHSA-2026:36085","RHSA-2026:36086","RHSA-2026:36087","RHSA-2026:36632","RHSA-2026:36633","RHSA-2026:36634","RHSA-2026:36768","RHSA-2026:36791","RHSA-2026:36792","RHSA-2026:36798","RHSA-2026:38502","RHSA-2026:38810","RHSA-2026:46377","RHSA-2026:46382","RHSA-2026:46385","RHSA-2026:46392","RHSA-2026:46456","RHSA-2026:46460","RHSA-2026:46473","RHSA-2026:49519","RLSA-2026:26562","RLSA-2026:26566","RLSA-2026:26590","RLSA-2026:26610","RLSA-2026:26709","RLSA-2026:28923","RLSA-2026:29844","UBUNTU-CVE-2026-50263"],"status":"published","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00141,"percentile":0.03461,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-06-05T10:36:46Z","modified":"2026-11-06T10:04:41Z","fixes":[{"ecosystem":"Alpaquita:23","package":"xorg-server","fixed_in":["21.1.23-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"xorg-server","fixed_in":["21.1.23-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"xorg-server","fixed_in":["21.1.23-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-icons","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-license","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-selinux","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-server","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-server-minimal","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-server-module","fixed_in":["1.12.0-13.el9_2.tuxcare.els27"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:21.1.7-3+deb12u13"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:21.1.16-1.3+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:21.1.23-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xwayland","fixed_in":["2:24.1.12-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-20.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Azure Linux:3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.10-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"24.1.14-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.4-r1"},{"fixed":"21.1.23-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.16-r0"},{"fixed":"21.1.23-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.1.4-r1"},{"fixed":"21.1.23-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.7-5.el9_6.tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.7-5.el9_6.tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-7.el9.tuxcare.els16"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-7.el9.tuxcare.els16"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-9.el9_6.tuxcare.els4"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-13.el9_2.tuxcare.els27"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.4-99.el7_9.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc-server-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc-server-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-33.0.11.el7_9.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.7-3+deb12u13"}]}],"versions":["2:21.1.7-3","2:21.1.7-3+deb12u1","2:21.1.7-3+deb12u10","2:21.1.7-3+deb12u11","2:21.1.7-3+deb12u12","2:21.1.7-3+deb12u2","2:21.1.7-3+deb12u3","2:21.1.7-3+deb12u4","2:21.1.7-3+deb12u5","2:21.1.7-3+deb12u6","2:21.1.7-3+deb12u7","2:21.1.7-3+deb12u8","2:21.1.7-3+deb12u9"]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.16-1.3+deb13u3"}]}],"versions":["2:21.1.16-1.3","2:21.1.16-1.3+deb13u1","2:21.1.16-1.3+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.23-1"}]}],"versions":["2:21.1.16-1.3","2:21.1.18-1","2:21.1.18-2","2:21.1.20-1","2:21.1.21-1","2:21.1.22-1"]},{"source":"osv","ecosystem":"Debian:12","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:22.1.9-1","2:23.1.0-1","2:23.1.1-1","2:23.2.0-1","2:23.2.1-1","2:23.2.2-1","2:23.2.3-1","2:23.2.4-1","2:23.2.6-1","2:24.0.99.901-1","2:24.1.0-1","2:24.1.10-1","2:24.1.11-1","2:24.1.12-1","2:24.1.13-1","2:24.1.14-1","2:24.1.2-1","2:24.1.3-1","2:24.1.4-1","2:24.1.4-2","2:24.1.4-3","2:24.1.5-1","2:24.1.6-1","2:24.1.8-1","2:24.1.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.10-1","2:24.1.11-1","2:24.1.12-1","2:24.1.13-1","2:24.1.14-1","2:24.1.6-1","2:24.1.8-1","2:24.1.9-1"]},{"source":"osv","ecosystem":"Debian:14","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.1.12-1"}]}],"versions":["2:24.1.10-1","2:24.1.11-1","2:24.1.6-1","2:24.1.8-1","2:24.1.9-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-45.oe2403sp1"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-45.oe2403sp3"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.8-38.oe2003sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-44.oe2203sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"xorg-x11-server-xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"xorg-x11-server-Xwayland-22.1.2-20.oe2203sp4"}]}],"bundled":14},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"xorg-x11-server-xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"xorg-x11-server-Xwayland-22.1.2-20.oe2403sp1"}]}],"bundled":14},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"xorg-x11-server-xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"xorg-x11-server-Xwayland-22.1.2-20.oe2403sp3"}]}],"bundled":14},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"xorg-x11-server-xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"xorg-x11-server-Xwayland-22.1.2-20.oe2403sp4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-20.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-20.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-20.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-35.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-21.el9_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-29.el9_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.9-8.el9_4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.9-8.el9_4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.9-8.el9_4.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-10.el9_2.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-10.el9_2.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-10.el9_2.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:23.2.7-6.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-19.el8_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-8.el8_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.10-5.el8_4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.5-6.el10_0.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.5-6.el10_0.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.5-6.el10_0.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"xorg-x11-server-Xwayland-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.5-6.el10_0.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-13.el8_8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-13.el8_8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-13.el8_8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-13.el8_8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-13.el8_8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-13.el8_8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-14.el9_2.15"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0-8.el8_4.16"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-15.el8_8.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.1-11.el9_6"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-8.el9_4.10"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-server-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"tigervnc-server-module-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-6.el8_6.18"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-server-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-server-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-36.el7_9.5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-25.el6_10.18"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"tigervnc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-25.el6_10.18"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"tigervnc-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-25.el6_10.18"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"tigervnc-server-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-25.el6_10.18"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"tigervnc-server-module","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-25.el6_10.18"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-20.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:10","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el10_2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.1.9-4.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-34.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-28.el8_10.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:8","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-10.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"tigervnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-7.el9_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.14.3-3ubuntu2","2:1.14.3-3ubuntu3","2:1.14.3-3ubuntu4","2:1.14.3-5ubuntu1","2:1.14.4-1ubuntu1","2:1.14.4-1ubuntu2","2:1.14.4.901-0ubuntu2","2:1.14.5-1ubuntu2","2:1.14.5-1ubuntu4","2:1.15.0-1ubuntu1","2:1.15.0-1ubuntu2","2:1.15.0-1ubuntu3","2:1.15.0-1ubuntu4","2:1.15.0-1ubuntu6","2:1.15.0-1ubuntu7","2:1.15.1-0ubuntu1","2:1.15.1-0ubuntu2","2:1.15.1-0ubuntu2.1","2:1.15.1-0ubuntu2.4","2:1.15.1-0ubuntu2.5","2:1.15.1-0ubuntu2.6","2:1.15.1-0ubuntu2.7","2:1.15.1-0ubuntu2.9","2:1.15.1-0ubuntu2.10","2:1.15.1-0ubuntu2.11","2:1.15.1-0ubuntu2.11+esm2","2:1.15.1-0ubuntu2.11+esm3","2:1.15.1-0ubuntu2.11+esm4","2:1.15.1-0ubuntu2.11+esm5","2:1.15.1-0ubuntu2.11+esm6","2:1.15.1-0ubuntu2.11+esm7","2:1.15.1-0ubuntu2.11+esm8","2:1.15.1-0ubuntu2.11+esm9","2:1.15.1-0ubuntu2.11+esm11","2:1.15.1-0ubuntu2.11+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.17.2-1ubuntu9","2:1.17.2-1ubuntu10","2:1.17.3-2ubuntu1","2:1.17.3-2ubuntu2","2:1.17.3-2ubuntu3","2:1.17.3-2ubuntu4","2:1.18.1-1ubuntu3","2:1.18.1-1ubuntu4","2:1.18.3-1ubuntu1","2:1.18.3-1ubuntu2","2:1.18.3-1ubuntu2.2","2:1.18.3-1ubuntu2.3","2:1.18.4-0ubuntu0.1","2:1.18.4-0ubuntu0.2","2:1.18.4-0ubuntu0.3","2:1.18.4-0ubuntu0.4","2:1.18.4-0ubuntu0.6","2:1.18.4-0ubuntu0.7","2:1.18.4-0ubuntu0.8","2:1.18.4-0ubuntu0.9","2:1.18.4-0ubuntu0.10","2:1.18.4-0ubuntu0.11","2:1.18.4-0ubuntu0.12","2:1.18.4-0ubuntu0.12+esm1","2:1.18.4-0ubuntu0.12+esm2","2:1.18.4-0ubuntu0.12+esm4","2:1.18.4-0ubuntu0.12+esm5","2:1.18.4-0ubuntu0.12+esm6","2:1.18.4-0ubuntu0.12+esm8","2:1.18.4-0ubuntu0.12+esm9","2:1.18.4-0ubuntu0.12+esm10","2:1.18.4-0ubuntu0.12+esm12","2:1.18.4-0ubuntu0.12+esm13","2:1.18.4-0ubuntu0.12+esm14","2:1.18.4-0ubuntu0.12+esm15","2:1.18.4-0ubuntu0.12+esm16","2:1.18.4-0ubuntu0.12+esm17","2:1.18.4-0ubuntu0.12+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xorg-server-hwe-16.04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.18.4-1ubuntu6.1~16.04.1","2:1.18.4-1ubuntu6.1~16.04.2","2:1.19.3-1ubuntu1~16.04.2","2:1.19.3-1ubuntu1~16.04.3","2:1.19.3-1ubuntu1~16.04.4","2:1.19.5-0ubuntu2~16.04.1","2:1.19.6-1ubuntu4~16.04.1","2:1.19.6-1ubuntu4.1~16.04.1","2:1.19.6-1ubuntu4.1~16.04.2","2:1.19.6-1ubuntu4.1~16.04.3","2:1.19.6-1ubuntu4.1~16.04.4","2:1.19.6-1ubuntu4.1~16.04.5","2:1.19.6-1ubuntu4.1~16.04.6","2:1.19.6-1ubuntu4.1~16.04.6+esm1","2:1.19.6-1ubuntu4.1~16.04.6+esm3","2:1.19.6-1ubuntu4.1~16.04.6+esm4","2:1.19.6-1ubuntu4.1~16.04.6+esm5","2:1.19.6-1ubuntu4.1~16.04.6+esm6","2:1.19.6-1ubuntu4.1~16.04.6+esm7","2:1.19.6-1ubuntu4.1~16.04.6+esm8","2:1.19.6-1ubuntu4.1~16.04.6+esm9","2:1.19.6-1ubuntu4.1~16.04.6+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.19.5-0ubuntu2","2:1.19.6-1ubuntu1","2:1.19.6-1ubuntu2","2:1.19.6-1ubuntu3","2:1.19.6-1ubuntu4","2:1.19.6-1ubuntu4.1","2:1.19.6-1ubuntu4.2","2:1.19.6-1ubuntu4.3","2:1.19.6-1ubuntu4.4","2:1.19.6-1ubuntu4.5","2:1.19.6-1ubuntu4.6","2:1.19.6-1ubuntu4.7","2:1.19.6-1ubuntu4.8","2:1.19.6-1ubuntu4.9","2:1.19.6-1ubuntu4.10","2:1.19.6-1ubuntu4.11","2:1.19.6-1ubuntu4.12","2:1.19.6-1ubuntu4.13","2:1.19.6-1ubuntu4.14","2:1.19.6-1ubuntu4.15","2:1.19.6-1ubuntu4.15+esm1","2:1.19.6-1ubuntu4.15+esm3","2:1.19.6-1ubuntu4.15+esm4","2:1.19.6-1ubuntu4.15+esm5","2:1.19.6-1ubuntu4.15+esm7","2:1.19.6-1ubuntu4.15+esm8","2:1.19.6-1ubuntu4.15+esm9","2:1.19.6-1ubuntu4.15+esm10","2:1.19.6-1ubuntu4.15+esm11","2:1.19.6-1ubuntu4.15+esm12","2:1.19.6-1ubuntu4.15+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xorg-server-hwe-18.04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.20.1-3ubuntu2.1~18.04.1","2:1.20.4-1ubuntu3~18.04.1","2:1.20.5+git20191008-0ubuntu1~18.04.1","2:1.20.8-2ubuntu2.1~18.04.1","2:1.20.8-2ubuntu2.2~18.04.1","2:1.20.8-2ubuntu2.2~18.04.2","2:1.20.8-2ubuntu2.2~18.04.3","2:1.20.8-2ubuntu2.2~18.04.4","2:1.20.8-2ubuntu2.2~18.04.5","2:1.20.8-2ubuntu2.2~18.04.6","2:1.20.8-2ubuntu2.2~18.04.7","2:1.20.8-2ubuntu2.2~18.04.8","2:1.20.8-2ubuntu2.2~18.04.9","2:1.20.8-2ubuntu2.2~18.04.10","2:1.20.8-2ubuntu2.2~18.04.11","2:1.20.8-2ubuntu2.2~18.04.11+esm1","2:1.20.8-2ubuntu2.2~18.04.11+esm2","2:1.20.8-2ubuntu2.2~18.04.11+esm3","2:1.20.8-2ubuntu2.2~18.04.11+esm4","2:1.20.8-2ubuntu2.2~18.04.11+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.20.5+git20191008-0ubuntu1","2:1.20.6-1ubuntu1","2:1.20.7-2ubuntu1","2:1.20.7-2ubuntu2","2:1.20.8-2ubuntu2","2:1.20.8-2ubuntu2.1","2:1.20.8-2ubuntu2.2","2:1.20.8-2ubuntu2.3","2:1.20.8-2ubuntu2.4","2:1.20.8-2ubuntu2.6","2:1.20.9-2ubuntu1.1~20.04.1","2:1.20.9-2ubuntu1.2~20.04.1","2:1.20.9-2ubuntu1.2~20.04.2","2:1.20.11-1ubuntu1~20.04.2","2:1.20.13-1ubuntu1~20.04.2","2:1.20.13-1ubuntu1~20.04.3","2:1.20.13-1ubuntu1~20.04.4","2:1.20.13-1ubuntu1~20.04.5","2:1.20.13-1ubuntu1~20.04.6","2:1.20.13-1ubuntu1~20.04.8","2:1.20.13-1ubuntu1~20.04.9","2:1.20.13-1ubuntu1~20.04.12","2:1.20.13-1ubuntu1~20.04.14","2:1.20.13-1ubuntu1~20.04.15","2:1.20.13-1ubuntu1~20.04.16","2:1.20.13-1ubuntu1~20.04.17","2:1.20.13-1ubuntu1~20.04.18","2:1.20.13-1ubuntu1~20.04.19","2:1.20.13-1ubuntu1~20.04.20","2:1.20.13-1ubuntu1~20.04.20+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.20.13-1ubuntu1","2:1.20.13-1ubuntu2","2:1.20.14-1ubuntu1","2:21.1.3-2ubuntu2","2:21.1.3-2ubuntu2.1","2:21.1.3-2ubuntu2.2","2:21.1.3-2ubuntu2.3","2:21.1.3-2ubuntu2.4","2:21.1.3-2ubuntu2.5","2:21.1.3-2ubuntu2.6","2:21.1.3-2ubuntu2.7","2:21.1.3-2ubuntu2.8","2:21.1.3-2ubuntu2.9","2:21.1.4-2ubuntu1.7~22.04.1","2:21.1.4-2ubuntu1.7~22.04.2","2:21.1.4-2ubuntu1.7~22.04.5","2:21.1.4-2ubuntu1.7~22.04.7","2:21.1.4-2ubuntu1.7~22.04.8","2:21.1.4-2ubuntu1.7~22.04.9","2:21.1.4-2ubuntu1.7~22.04.10","2:21.1.4-2ubuntu1.7~22.04.11","2:21.1.4-2ubuntu1.7~22.04.12","2:21.1.4-2ubuntu1.7~22.04.13","2:21.1.4-2ubuntu1.7~22.04.14","2:21.1.4-2ubuntu1.7~22.04.15","2:21.1.4-2ubuntu1.7~22.04.16"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.2-0ubuntu1","2:21.1.3-1","2:21.1.3-1ubuntu1","2:21.1.4-1","2:22.1.0-1","2:22.1.1-1","2:22.1.1-1ubuntu0.1","2:22.1.1-1ubuntu0.2","2:22.1.1-1ubuntu0.3","2:22.1.1-1ubuntu0.4","2:22.1.1-1ubuntu0.5","2:22.1.1-1ubuntu0.6","2:22.1.1-1ubuntu0.7","2:22.1.1-1ubuntu0.9","2:22.1.1-1ubuntu0.10","2:22.1.1-1ubuntu0.11","2:22.1.1-1ubuntu0.12","2:22.1.1-1ubuntu0.13","2:22.1.1-1ubuntu0.14","2:22.1.1-1ubuntu0.15","2:22.1.1-1ubuntu0.17","2:22.1.1-1ubuntu0.18","2:22.1.1-1ubuntu0.19","2:22.1.1-1ubuntu0.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.7-3ubuntu2","2:21.1.7-3ubuntu2.1","2:21.1.10-1ubuntu1","2:21.1.11-2ubuntu1","2:21.1.12-1ubuntu1","2:21.1.12-1ubuntu1.1","2:21.1.12-1ubuntu1.2","2:21.1.12-1ubuntu1.3","2:21.1.12-1ubuntu1.4","2:21.1.12-1ubuntu1.5","2:21.1.12-1ubuntu1.6","2:21.1.12-1ubuntu1.8","2:21.1.12-1ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:23.2.0-1","2:23.2.0-1ubuntu0.1","2:23.2.3-1","2:23.2.4-1","2:23.2.4-1build1","2:23.2.4-1build2","2:23.2.4-1build3","2:23.2.6-1","2:23.2.6-1ubuntu0.1","2:23.2.6-1ubuntu0.2","2:23.2.6-1ubuntu0.4","2:23.2.6-1ubuntu0.5","2:23.2.6-1ubuntu0.6","2:23.2.6-1ubuntu0.7","2:23.2.6-1ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.16-1ubuntu1","2:21.1.18-1ubuntu1","2:21.1.18-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.6-1","2:24.1.6-1ubuntu1","2:24.1.6-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.22-1ubuntu1","2:21.1.22-1ubuntu4","2:21.1.24-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.10-1","2:24.1.12-1","2:24.1.13-1","2:24.1.14-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:21.1.18-1ubuntu1","2:21.1.21-1ubuntu1","2:21.1.22-1ubuntu1","2:21.1.22-1ubuntu1.2","2:21.1.22-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:24.1.6-1ubuntu1","2:24.1.8-1","2:24.1.9-1","2:24.1.10-1"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 6 extended lifecycle support  - extension"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"x.org","product":"x_server"},{"vendor":"x.org","product":"xwayland"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:26562","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26566","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26590","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26610","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26709","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28923","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29844","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36083","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36085","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36086","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36087","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36632","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36633","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36634","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36768","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36791","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36792","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36798","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:38502","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:38810","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46377","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46382","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46385","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46392","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46456","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46460","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46473","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49519","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50263","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485388","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05","tags":["Patch","fix","article","report"]},{"url":"https://lists.x.org/archives/xorg-announce/2026-June/003702.html","tags":["Mailing List","Vendor Advisory","web","article"]},{"url":"https://redhat.atlassian.net/browse/PSIRTSUPT-16950","tags":["Permissions Required","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50263","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4ph5-83mw-vm42"},{"url":"https://access.redhat.com/security/cve/CVE-2026-50256","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50257","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50258","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50259","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50260","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50261","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50262","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50264","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485380","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485382","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485383","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485384","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485385","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485386","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485387","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485388","tags":["report"]},{"url":"https://bugzilla.redhat.com/2485389","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-26562.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-26566.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-26590.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-26610.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-26709.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-28923.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-29844.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-50263","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782224017.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50258","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50260","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50262","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782484404.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782812906.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783338681.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790583885.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55999","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790584501.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34003","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790585169.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790608489.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1791120339.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50263.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-50263","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50264","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34002","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4481","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4482","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4483","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485389","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26562.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50256","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50257","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50258","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50259","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50260","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50261","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50262","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/6d459e4daf715bea8abdafa8fb130be2f8a1d145","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50263","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50264","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26566.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26590.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26610.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26709.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28923.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29844.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36083.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36085.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36086.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36087.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36632.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36633.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36634.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36768.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36791.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36792.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36798.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38502.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38810.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46377.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46382.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46385.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46392.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46456.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46460.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46473.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49519.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26562","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26566","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26590","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26610","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26709","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:28923","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:29844","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-50263","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/02/1","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-50263","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T10:36:46.377Z","modified":"2026-11-05T21:19:46.249Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-05T22:55:20.139479Z"}],"euvd":[{"id":"EUVD-2026-34820","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T10:36:46Z","modified":"2026-11-05T21:19:46Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T22:02:08.543452Z"}],"ghsa":[{"id":"GHSA-4ph5-83mw-vm42","title":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A...","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T12:31:46Z","modified":"2026-08-05T00:31:37Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:10:06.083807Z"}],"nvd":[{"id":"CVE-2026-50263","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T12:16:39.927Z","modified":"2026-11-05T22:18:46.08Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-05T23:57:17.922269Z"}],"osv":[{"id":"BELL-CVE-2026-50263","status":"published","published":"2026-06-06T06:10:49.28208Z","modified":"2026-06-09T07:15:10.357725158Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:24.391068Z"},{"id":"CVE-2026-50263","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T10:36:46.377Z","modified":"2026-11-07T07:06:40.953614883Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-07T03:08:06.729372Z"},{"id":"DEBIAN-CVE-2026-50263","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T12:16:39.927Z","modified":"2026-11-06T10:04:41.017508811Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"OESA-2026-2681","title":"xorg-x11-server security update","description":"X.Org X11 X server\r\n\r\nSecurity Fix(es):\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50256)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50257)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50258)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50259)\n\nA use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for privilege escalation if the X server runs as root.(CVE-2026-50260)\n\nA use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while changing those counters. This may be used to crash the server, or for privilege escalation if the X server runs as root.(CVE-2026-50261)\n\nAn out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding the request buffer, leading to information disclosure. A write path also exists but requires byte-swapped clients which is disabled by default.(CVE-2026-50262)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50263)\n\nAn out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for privilege escalation if the X server runs as root.(CVE-2026-50264)","status":"published","published":"2026-06-12T11:11:37Z","modified":"2026-08-18T01:20:06.209183489Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-4480","title":"xorg-x11-server-xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.   %package devel Summary: Development package Requires: pkgconfig   %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland.   %prep %autosetup -n xwayland- -p1   %build %meson \\         -Ddefault_font_path=\u0026amp;quot;catalogue:/etc/X11/fontpath.d,built-ins\u0026amp;quot; \\         -Dbuilder_string=\u0026amp;quot;Build ID:  -\u0026amp;quot; \\         -Dxkb_output_dir=/lib/xkb \\         -Dxcsecurity=true \\         -Dglamor=true \\         -Ddri3=true   %meson_build\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.(CVE-2025-62229)\n\nA flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.(CVE-2025-62231)\n\nA flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.(CVE-2026-33999)\n\nA flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.(CVE-2026-34001)\n\nA flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.(CVE-2026-34002)\n\nA flaw was found in the X.Org X server\u0026apos;s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.(CVE-2026-34003)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50257)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50258)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50259)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50260)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50261)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50262)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50263)\n\nLocal attackers with an X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)","status":"published","published":"2026-10-22T14:35:38Z","modified":"2026-10-22T14:45:09.842130586Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4481","title":"xorg-x11-server-xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.   %package devel Summary: Development package Requires: pkgconfig   %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland.   %prep %autosetup -n xwayland- -p1   %build %meson \\         -Ddefault_font_path=\u0026amp;quot;catalogue:/etc/X11/fontpath.d,built-ins\u0026amp;quot; \\         -Dbuilder_string=\u0026amp;quot;Build ID:  -\u0026amp;quot; \\         -Dxkb_output_dir=/lib/xkb \\         -Dxcsecurity=true \\         -Dglamor=true \\         -Ddri3=true   %meson_build\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.(CVE-2025-62229)\n\nA flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.(CVE-2025-62231)\n\nA flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.(CVE-2026-33999)\n\nA flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.(CVE-2026-34001)\n\nA flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.(CVE-2026-34002)\n\nA flaw was found in the X.Org X server\u0026apos;s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.(CVE-2026-34003)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50257)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50258)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50259)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50260)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50261)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50262)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50263)\n\nLocal attackers with an X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)","status":"published","published":"2026-10-22T14:35:39Z","modified":"2026-10-22T14:45:09.836604476Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4482","title":"xorg-x11-server-xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.   %package devel Summary: Development package Requires: pkgconfig   %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland.   %prep %autosetup -n xwayland- -p1   %build %meson \\         -Ddefault_font_path=\u0026amp;quot;catalogue:/etc/X11/fontpath.d,built-ins\u0026amp;quot; \\         -Dbuilder_string=\u0026amp;quot;Build ID:  -\u0026amp;quot; \\         -Dxkb_output_dir=/lib/xkb \\         -Dxcsecurity=true \\         -Dglamor=true \\         -Ddri3=true   %meson_build\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute arbitrary code or cause a denial of service.(CVE-2025-62229)\n\nA flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.(CVE-2025-62231)\n\nA flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.(CVE-2026-33999)\n\nA flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.(CVE-2026-34001)\n\nA flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.(CVE-2026-34002)\n\nA flaw was found in the X.Org X server\u0026apos;s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.(CVE-2026-34003)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50257)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50258)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50259)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50260)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50261)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50262)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50263)\n\nLocal attackers with an X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)","status":"published","published":"2026-10-22T14:35:40Z","modified":"2026-10-22T14:45:10.486993778Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4483","title":"xorg-x11-server-xwayland security update","description":"Xwayland is an X server for running X clients under Wayland.   %package devel Summary: Development package Requires: pkgconfig   %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland.   %prep %autosetup -n xwayland- -p1   %build %meson \\         -Ddefault_font_path=\u0026amp;quot;catalogue:/etc/X11/fontpath.d,built-ins\u0026amp;quot; \\         -Dbuilder_string=\u0026amp;quot;Build ID:  -\u0026amp;quot; \\         -Dxkb_output_dir=/lib/xkb \\         -Dxcsecurity=true \\         -Dglamor=true \\         -Ddri3=true   %meson_build\r\n\r\nSecurity Fix(es):\n\nA flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.(CVE-2025-62231)\n\nA flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.(CVE-2026-34002)\n\nA flaw was found in the X.Org X server\u0026apos;s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.(CVE-2026-34003)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50257)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50258)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50259)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50260)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50261)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50262)\n\n[\u0026apos;Hi all,\\n\\nCVEs have been issued now, please see inline below\\n\\nOn Tue, Jun 02, 2026 at 10:01:46AM +1000, Peter Hutterer wrote:\u0026apos;, \u0026quot;=======================================================================\\nX.Org Security Advisory: June 2, 2026 \\n\\nIssues in X.Org X server prior to 21.1.23 and Xwayland prior to 24.1.12\\n=======================================================================\\n\\nMultiple issues have been found in the X server and Xwayland implementations\\npublished by X.Org for which we are releasing security fixes for in\\nxorg-server-21.1.23 and xwayland-24.1.12.\\n\\nNote that CVEs have been requested for these issues but did not get assigned in\\ntime for this disclosure.\\n\\n* Font Alias Stack-based Buffer Overflow\\n\\n    A mismatch between the X server and the libXfont2 library\u0026apos;s maximum\\n    font name length can cause a stack buffer overflow during font alias\\n    resolution. The server allocates a 256 byte stack buffer but libXfont2\u0026apos;s\\n    alias target name length is 1024 bytes. A font alias name between 257\\n    and 1023 bytes causes the X server to copy that name into the undersized\\n    stack buffer without further checks.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026quot;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30136)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50256\u0026apos;, \u0026apos;* XSYNC Use-After-Free in miSyncDestroyFence()\\n\\n    A client that sets up multiple fence triggers can trigger a\\n    use-after-free function pointer call. An attacker would connect to the\\n    X server to set up a fence and await that fence, then a second X\\n    connection destroys the fence, causing the use-after-free.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30159)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50257\u0026apos;, \u0026apos;* XKB Key Types Stack-based Buffer Overflow\\n\\n    The X server has multiple stack buffers that are sized\\n    XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify\\n    or clamp non-canonical key types to XkbMaxShiftLevel. A client can\\n    change key types to excessive shift levels and trigger three separate\\n    stack overflows.\\n\\n    This is caused by an incomplete fix of CVE-2025-26597.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30160)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50258\u0026apos;, \u0026apos;* XKB SetMap Request Stack-based Buffer Overflow\\n\\n    _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256]\\n    indexed by key type index. The helper function CheckKeyTypes() writes\\n    to this buffer at a client-controlled offset, allowing a stack buffer\\n    overflow.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30161)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50259\u0026apos;, \u0026apos;* XSYNC Use-After-Free in FreeCounter()\\n\\n    A client that sets up multiple SyncCounters and awaits on those\\n    triggers can trigger a use-after-free when destroying those counters\\n    via a second client connection.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30163)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50260\u0026apos;, \u0026apos;* XSYNC Use-After-Free in SyncChangeCounter()\\n\\n    A client that sets up multiple SyncCounters can trigger a use-after-free\\n    when destroying those counters via a second client connection while\\n    changing those counters.\\n\\n    Fixed in: xorg-server-21.1.23 and xwayland-24.1.12\\n    Fix:\u0026apos;, \u0026apos;Found by: Anonymous working with TrendAI Zero Day Initiative.\\n              (ZDI-CAN-30164)\u0026apos;, \u0026apos;This issue has been assigned CVE-2026-50261\u0026apos;, \u0026apos;* GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write\\n\\n    A wrong size validation check in __glXDisp_ChangeDrawableAttributes()\\n    can read (or write) a client-contr(CVE-2026-50263)\n\nLocal attackers with an X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)","status":"published","published":"2026-10-22T14:35:40Z","modified":"2026-10-22T14:45:07.189646039Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:26562","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security, bug fix, and enhancement update","status":"published","published":"2026-06-18T10:09:52Z","modified":"2026-09-29T10:08:25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26566","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security, bug fix, and enhancement update","status":"published","published":"2026-06-22T10:06:13Z","modified":"2026-09-29T10:08:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26590","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security, bug fix, and enhancement update","status":"published","published":"2026-06-18T10:09:56Z","modified":"2026-09-29T10:08:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26610","title":"Red Hat Security Advisory: xorg-x11-server security, bug fix, and enhancement update","status":"published","published":"2026-06-18T10:09:58Z","modified":"2026-09-29T10:08:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26709","title":"Red Hat Security Advisory: xorg-x11-server security, bug fix, and enhancement update","status":"published","published":"2026-06-18T10:10:02Z","modified":"2026-09-29T10:08:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28923","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-06-25T10:43:02Z","modified":"2026-09-29T10:08:56Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:29844","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-06-26T11:46:30Z","modified":"2026-09-29T10:09:03Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:36083","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-08T10:09:03Z","modified":"2026-09-29T10:10:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36085","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-08T10:09:03Z","modified":"2026-09-29T10:10:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36086","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-07T10:09:39Z","modified":"2026-09-29T10:10:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36087","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-08T10:09:04Z","modified":"2026-09-29T10:10:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36632","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-07-08T10:09:33Z","modified":"2026-09-29T10:10:15Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36633","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-07-08T10:09:33Z","modified":"2026-09-29T10:10:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36634","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-07-08T10:09:34Z","modified":"2026-09-29T10:10:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36768","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-09T10:12:52Z","modified":"2026-09-29T10:10:21Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36791","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-09T10:12:55Z","modified":"2026-09-29T10:10:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36792","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2026-07-09T10:12:56Z","modified":"2026-09-29T10:10:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:36798","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-07-09T10:12:57Z","modified":"2026-09-29T10:10:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:38502","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-07-13T10:07:42Z","modified":"2026-09-29T10:10:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:38810","title":"Red Hat Security Advisory: xorg-x11-server-Xwayland security update","status":"published","published":"2026-07-14T10:09:16Z","modified":"2026-09-29T10:10:59Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:46377","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:38Z","modified":"2026-09-29T10:12:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:46382","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:40Z","modified":"2026-09-29T10:12:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:46385","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:41Z","modified":"2026-09-29T10:12:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:46392","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:45Z","modified":"2026-09-29T10:12:19Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:46456","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:49Z","modified":"2026-09-29T10:12:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:46460","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:49Z","modified":"2026-09-29T10:12:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:46473","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-07-28T10:13:51Z","modified":"2026-09-29T10:12:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:49519","title":"Red Hat Security Advisory: tigervnc security update","status":"published","published":"2026-08-04T10:26:44Z","modified":"2026-09-29T10:13:00Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RLSA-2026:26562","title":"Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update","description":"Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nBug Fix(es) and Enhancement(s):\n\n* [xwayland] Backport other security fixes without a CVE assigned [rhel-8.10.z] (JIRA:Rocky Linux-184293)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T00:01:03.263594Z","modified":"2026-06-19T00:30:04.746434482Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26566","title":"Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update","description":"Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nBug Fix(es) and Enhancement(s):\n\n* [xwayland] Backport other security fixes without a CVE assigned [rhel-10.2.z] (JIRA:Rocky Linux-184290)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-24T12:05:09.232192Z","modified":"2026-06-24T12:30:04.045981138Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26590","title":"Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update","description":"Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nBug Fix(es) and Enhancement(s):\n\n* [xwayland] Backport other security fixes without a CVE assigned [rhel-9.8.z] (JIRA:Rocky Linux-184292)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T00:03:21.214998Z","modified":"2026-06-19T00:30:04.760784253Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26610","title":"Important: xorg-x11-server security, bug fix, and enhancement update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nBug Fix(es) and Enhancement(s):\n\n* [xserver] Backport other security fixes without a CVE assigned [rhel-9.8.z] (JIRA:Rocky Linux-184288)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T00:03:21.214998Z","modified":"2026-06-19T00:30:04.767763019Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26709","title":"Important: xorg-x11-server security, bug fix, and enhancement update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nBug Fix(es) and Enhancement(s):\n\n* [xserver] Backport other security fixes without a CVE assigned [rhel-8.10.z] (JIRA:Rocky Linux-184289)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T00:01:03.263594Z","modified":"2026-06-19T00:30:04.770533564Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:28923","title":"Important: tigervnc security update","description":"Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-25T06:00:31.266414Z","modified":"2026-06-25T06:30:04.618530026Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:29844","title":"Important: tigervnc security update","description":"Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.\n\nSecurity Fix(es):\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n\n* xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-26T12:03:13.137376Z","modified":"2026-06-26T12:16:30.819576658Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-50263","description":"A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.","status":"published","published":"2026-06-05T12:16:00Z","modified":"2026-10-19T23:30:07.987659986Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:33.391918Z"},{"id":"ALSA-2026:26562","title":"Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update","description":"Xwayland is an X server for running X clients under Wayland.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [xwayland] Backport other security fixes without a CVE assigned [almalinux-8.10.z] (JIRA:AlmaLinux-184293)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:02:23.936513342Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26566","title":"Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update","description":"Xwayland is an X server for running X clients under Wayland.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [xwayland] Backport other security fixes without a CVE assigned [almalinux-10.2.z] (JIRA:AlmaLinux-184290)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:30:20.207328317Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26590","title":"Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update","description":"Xwayland is an X server for running X clients under Wayland.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [xwayland] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184292)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:32:33.907993672Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26610","title":"Important: xorg-x11-server security, bug fix, and enhancement update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [xserver] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184288)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:32:33.996334548Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26709","title":"Important: xorg-x11-server security, bug fix, and enhancement update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [xserver] Backport other security fixes without a CVE assigned [almalinux-8.10.z] (JIRA:AlmaLinux-184289)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:02:23.828242892Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:28923","title":"Important: tigervnc security update","description":"Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.  \n\nSecurity Fix(es):  \n\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263)\n  * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-24T00:00:00Z","modified":"2026-10-29T11:02:26.323437442Z","updated_at":"2026-11-02T15:27:54.283654Z"}]},"sources_more":{"osv":12}}