Linux · Security advisory · October 27, 2026

RHSA-2026:89747: Security update for 8 packages

RHSA-2026:89747, released October 27, 2026, fixes 8 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0020
10th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
xorg-x11-server-XdmxRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-XephyrRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-XnestRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-XorgRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-XvfbRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-commonRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-develRHEL 80:1.20.11-28.el8_10.5
xorg-x11-server-sourceRHEL 80:1.20.11-28.el8_10.5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-93518 X.Org Server XKB ResizeKeyType Numeric Truncation 7.8 0.0020 None reported
High CVE-2026-93519 X.Org Server XFixes Pointer Barrier Event List Buffer Overflow 7.8 0.0020 None reported
High CVE-2026-93520 X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write 7.8 0.0020 None reported
High CVE-2026-93521 X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow 7.8 0.0020 None reported
High CVE-2026-93523 X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write 7.8 0.0020 None reported
High CVE-2026-93517 X.Org Server GLX RenderLarge Heap Buffer Overflow 7.8 0.0019 None reported
High CVE-2026-93516 .Org Server XInput Passive Grab Use-After-Free 7.8 0.0019 None reported
High CVE-2026-88812 X.Org Server XKB SetGeometry TextDoodad Double Free 7.8 0.0019 None reported
Showing 1 to 8 of 8 1