MGASA-2026-0529

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0529.html
Import Source
https://advisories.mageia.org/MGASA-2026-0529.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0529
Upstream
CVE (12)
  • CVE-2026-88812
  • CVE-2026-93515
  • CVE-2026-93516
  • CVE-2026-93517
  • CVE-2026-93518
  • CVE-2026-93519
  • CVE-2026-93520
  • CVE-2026-93521
  • CVE-2026-93522
  • CVE-2026-93523
  • CVE-2026-93524
  • CVE-2026-93536
Published
2026-10-20T15:57:48Z
Modified
2026-10-20T16:00:04Z
Summary
Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs
Details

XKB SetGeometry TextDoodad Double Free. (CVE-2026-88812) Present Extension Cross-Window Notify Use-After-Free. (CVE-2026-93515) XInput Passive Grab modifierDevice Use-After-Free. (CVE-2026-93516) GLX RenderLarge Heap Buffer Overflow. (CVE-2026-93517) XKB ResizeKeyType Numeric Truncation. (CVE-2026-93518) XFixes Pointer Barrier Event List Buffer Overflow. (CVE-2026-93519) XKB ChangeKeycodeRange Heap Out-of-Bounds Write. (CVE-2026-93520) RandR ChangeProviderProperty Heap Buffer Overflow. (CVE-2026-93521) Glamor CopyArea CPU-FBO Heap Buffer Overflow. (CVE-2026-93522) XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write. (CVE-2026-93523) XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read. (CVE-2026-93524) GestureBuildSprite Use-After-Free. (CVE-2026-93536)

References
Credits

Affected packages

Mageia:10 / x11-server

Package

Name
x11-server
Purl
pkg:rpm/mageia/x11-server?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
21.1.25-2.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0529.json"

Mageia:10 / x11-server-xwayland

Package

Name
x11-server-xwayland
Purl
pkg:rpm/mageia/x11-server-xwayland?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
24.1.14-1.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0529.json"

Mageia:10 / tigervnc

Package

Name
tigervnc
Purl
pkg:rpm/mageia/tigervnc?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.15.0-7.3.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0529.json"