Multiple issues have been found in the X server and Xwayland implementations
published by X.Org for which we are releasing security fixes for in
xorg-server-21.1.25 and xwayland-24.1.14.
CVE-2026-88812: XKB SetGeometry TextDoodad Double Free
CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free
CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free
CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow
CVE-2026-93518: XKB ResizeKeyType Numeric Truncation
CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow
CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow
CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow
CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write
CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
CVE-2026-93536: GestureBuildSprite Use-After-Free