{"id":"CLSA-2026-1782484404","summary":"xorg-x11-server-Xwayland: Fix of 8 CVEs","details":"- CVE-2026-50256: increase XLFDMAXFONTNAMELEN and add bounds checks in doListFontsAndAliases/doListFontsWithInfo to prevent stack buffer overflow via long fonts.alias targets\n- CVE-2026-50257: fix use-after-free in miSyncDestroyFence by using safe list iteration and null-checking pTrigger before dereferencing\n- CVE-2026-50258: reject XkbSetMap key types with numLevels exceeding XkbMaxShiftLevel to prevent stack buffer overflow in XkbKeyTypesForCoreSymbols\n- CVE-2026-50259: clamp nMaps to XkbMaxLegalKeyCode+1 in CheckKeyTypes to prevent stack buffer overflow when XkbSetMapResizeTypes wraps\n- CVE-2026-50260: fix use-after-free in FreeCounter by using safe list iteration, advancing list head before callback, and NULL-ing out shared trigger pointers in FreeAwait\n- CVE-2026-50261: restart trigger list iteration in SyncChangeCounter after TriggerFired to avoid dereferencing freed sibling-trigger nodes\n- CVE-2026-50262: fix reversed length check in GLX ChangeDrawableAttributes by using REQUEST_FIXED_SIZE to prevent out-of-bounds read/write\n- CVE-2026-50263: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow to avoid use-after-free on saver-window replacement","modified":"2026-10-26T09:30:23.293487544Z","published":"2026-06-26T14:33:49Z","upstream":["CVE-2026-50256","CVE-2026-50257","CVE-2026-50258","CVE-2026-50259","CVE-2026-50260","CVE-2026-50261","CVE-2026-50262","CVE-2026-50263"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782484404.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50256"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50257"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50258"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50259"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50260"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50261"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50262"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50263"}],"affected":[{"package":{"name":"xorg-x11-server-Xwayland","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xwayland?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-7.el9.tuxcare.els16"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782484404.json"}},{"package":{"name":"xorg-x11-server-Xwayland-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/xorg-x11-server-Xwayland-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-7.el9.tuxcare.els16"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782484404.json"}}],"schema_version":"1.9.0"}