Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat libX11 packages can let attackers crash systems

published 25 days ago

Summary

The libX11, libX11-common, libX11-devel, and libX11-xcb packages from Red Hat contain a flaw that could let a malicious user cause the program to stop working or the system to become unstable. This could disrupt services that rely on graphical display functions. Update the packages to the latest version as soon as possible to prevent potential disruption.

What to do

Update redhat libx11 to version 0:1.8.13-3.1.hum1.
Update redhat libx11-common to version 0:1.8.13-3.1.hum1.
Update redhat libx11-devel to version 0:1.8.13-3.1.hum1.
Update redhat libx11-xcb to version 0:1.8.13-3.1.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	libx11	< 0:1.8.13-3.1.hum1 Fix: upgrade to 0:1.8.13-3.1.hum1
Red Hat:hummingbird:1	redhat	libx11-common	< 0:1.8.13-3.1.hum1 Fix: upgrade to 0:1.8.13-3.1.hum1
Red Hat:hummingbird:1	redhat	libx11-devel	< 0:1.8.13-3.1.hum1 Fix: upgrade to 0:1.8.13-3.1.hum1
Red Hat:hummingbird:1	redhat	libx11-xcb	< 0:1.8.13-3.1.hum1 Fix: upgrade to 0:1.8.13-3.1.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

References

https://access.redhat.com/errata/RHSA-2026:79278 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-94284 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://images.redhat.com/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-94285 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-94283 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79278.... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2542367 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-94283 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-94283 Vendor Advisory
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2542378 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-94284 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-94284 Vendor Advisory
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2542376 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-94285 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-94285 Vendor Advisory
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310/diffs?commit... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.5 Medium

Timeline

Published10 Oct 2026

Updated10 Oct 2026

First seen10 Oct 2026

Sources

RHSA-2026:79278 · OSV

Track software like this

Free during beta