OESA-2026-4610 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.CVE-2026-109089 X.Org reports: Multiple issues have been found in the...

OESA-2026-4611 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.CVE-2026-109089 X.Org reports: Multiple issues have been found in the...

OESA-2026-4609 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.CVE-2026-109089 X.Org reports: Multiple issues have been found in the...

CVE-2026-93517

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context...

CVE-2026-93517 X.Org Server GLX RenderLarge Heap Buffer Overflow

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context...

EUVD-2026-112082

A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that could be be triggered by an authenticated X client could cause crashes or code execution in X server context...

Amazon Linux 2023 : libXtst, libXtst-devel (ALAS2023-2026-3259)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3259 advisory. An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. CVE-2026-94286 Tenable has extracted the preceding...

Amazon Linux 2 : libXtst (ALAS-2026-4012)

The version of libXtst installed on the remote host is prior to 1.2.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4012 advisory. An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attach...

OESA-2026-4504 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.CVE-2026-109089 X.Org reports: Multiple issues have been found in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142325 advisory. An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

FreeBSD : libXtst -- multiple vulnerabilities (39d5f71d-ca2a-11f1-ada1-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 39d5f71d-ca2a-11f1-ada1-ac5afc632ba3 advisory. X.Org reports: Multiple issues have been found in the X client library implementations publish...

FreeBSD : libX11 -- multiple vulnerabilities (fbf59c13-ca23-11f1-ada1-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fbf59c13-ca23-11f1-ada1-ac5afc632ba3 advisory. X.Org reports: Multiple issues have been found in the X client library implementations publish...

FreeBSD : libXrender -- vulnerability (8c6ec104-ca27-11f1-ada1-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8c6ec104-ca27-11f1-ada1-ac5afc632ba3 advisory. X.Org reports: Multiple issues have been found in the X client library implementations published by X.O...

FreeBSD : libXpm -- vulnerability (d4bc120a-ca26-11f1-ada1-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d4bc120a-ca26-11f1-ada1-ac5afc632ba3 advisory. X.Org reports: Multiple issues have been found in the X client library implementations published by X.O...

FreeBSD : libXi -- multiple vulnerabilities (9022f1ac-ca25-11f1-ada1-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9022f1ac-ca25-11f1-ada1-ac5afc632ba3 advisory. X.Org reports: Multiple issues have been found in the X client library implementations publish...

EulerOS 2.0 SP15 : libXfont2 (EulerOS-SA-2026-3983)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client...

Security Bulletin: IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall (CVE-2026-7366)

Summary IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall CVE-2026-7366 Vulnerability Details CVEID:CVE-2026-7366 DESCRIPTION: IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 throug...

AlmaLinux 9.6 [TuxCare] Security Update: libXfont2 / libXfont2-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784798270)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784798270 advisory. - A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers...

AlmaLinux 9.2 [TuxCare] Security Update: libXfont2 / libXfont2-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1784797098)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784797098 advisory. - A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers...

CentOS Linux 7 [TuxCare] Security Update: libXfont2 / libXfont2-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787393547)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787393547 advisory. - A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers abl...