CLSA-2026-1788794334

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788794334
Upstream
CVE (2)
Published
2026-09-09T11:30:55Z
Modified
2026-10-26T09:31:48Z
Summary
xorg-x11-server: Fix of 2 CVEs
Details
  • CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names
  • CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking front buffers as booleans
References

Affected packages

TuxCare:CentOS:7
xorg-x11-server-Xdmx

Package

Name
xorg-x11-server-Xdmx
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xdmx?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-Xephyr

Package

Name
xorg-x11-server-Xephyr
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xephyr?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-Xnest

Package

Name
xorg-x11-server-Xnest
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xnest?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-Xorg

Package

Name
xorg-x11-server-Xorg
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xorg?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-Xvfb

Package

Name
xorg-x11-server-Xvfb
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xvfb?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-Xwayland

Package

Name
xorg-x11-server-Xwayland
Purl
pkg:rpm/tuxcare/xorg-x11-server-Xwayland?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-common

Package

Name
xorg-x11-server-common
Purl
pkg:rpm/tuxcare/xorg-x11-server-common?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-devel

Package

Name
xorg-x11-server-devel
Purl
pkg:rpm/tuxcare/xorg-x11-server-devel?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"
xorg-x11-server-source

Package

Name
xorg-x11-server-source
Purl
pkg:rpm/tuxcare/xorg-x11-server-source?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.4-99.el7_9.tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1788794334.json"