{"id":"MGASA-2026-0529","summary":"Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs","details":"XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812)\nPresent Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515)\nXInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516)\nGLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517)\nXKB ResizeKeyType Numeric Truncation. (CVE-2026-93518)\nXFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519)\nXKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520)\nRandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521)\nGlamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522)\nXInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write.\n(CVE-2026-93523)\nXKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read.\n(CVE-2026-93524)\nGestureBuildSprite Use-After-Free. (CVE-2026-93536)\n","modified":"2026-10-20T16:00:04.492555526Z","published":"2026-10-20T15:57:48Z","upstream":["CVE-2026-88812","CVE-2026-93515","CVE-2026-93516","CVE-2026-93517","CVE-2026-93518","CVE-2026-93519","CVE-2026-93520","CVE-2026-93521","CVE-2026-93522","CVE-2026-93523","CVE-2026-93524","CVE-2026-93536"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0529.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36467"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2026/10/07/23"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36488"}],"affected":[{"package":{"name":"x11-server","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/x11-server?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.25-2.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0529.json"}},{"package":{"name":"x11-server-xwayland","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/x11-server-xwayland?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.14-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0529.json"}},{"package":{"name":"tigervnc","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/tigervnc?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-7.3.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0529.json"}}],"schema_version":"1.9.0","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}