ALSA-2026:11388

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:11388
Related
  • CVE-2026-33999
  • CVE-2026-34001
  • CVE-2026-34003
Published
2026-04-28T00:00:00Z
Modified
2026-04-30T14:30:15.273899Z
Summary
Important: xorg-x11-server security update
Details

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  • xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  • xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9
xorg-x11-server-Xdmx

Package

Name
xorg-x11-server-Xdmx
Purl
pkg:rpm/almalinux/xorg-x11-server-Xdmx

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-Xephyr

Package

Name
xorg-x11-server-Xephyr
Purl
pkg:rpm/almalinux/xorg-x11-server-Xephyr

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-Xnest

Package

Name
xorg-x11-server-Xnest
Purl
pkg:rpm/almalinux/xorg-x11-server-Xnest

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-Xorg

Package

Name
xorg-x11-server-Xorg
Purl
pkg:rpm/almalinux/xorg-x11-server-Xorg

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-Xvfb

Package

Name
xorg-x11-server-Xvfb
Purl
pkg:rpm/almalinux/xorg-x11-server-Xvfb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-common

Package

Name
xorg-x11-server-common
Purl
pkg:rpm/almalinux/xorg-x11-server-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-devel

Package

Name
xorg-x11-server-devel
Purl
pkg:rpm/almalinux/xorg-x11-server-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"
xorg-x11-server-source

Package

Name
xorg-x11-server-source
Purl
pkg:rpm/almalinux/xorg-x11-server-source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.11-33.el9_7

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:11388.json"