RLSA-2026:95281

Security

Mirrored from RHSA-2026:95281

Issued at: 2026-11-06

Updated at: 2026-11-06

Advisory content derived from Red Hat RHSA-2026:95281, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Moderate: xorg-x11-server-Xwayland security update

Description

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling (CVE-2026-93520)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64

Rocky Linux 8 x86_64

Fixes

2545908

CVEs

CVE-2026-93520

Affected packages

Rocky Linux 8 aarch64 - AppStream

xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.5.aarch64.rpm

xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.5.src.rpm

xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.5.aarch64.rpm

xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.5.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.5.src.rpm

xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.5.x86_64.rpm

xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.5.x86_64.rpm

xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.5.x86_64.rpm