Red Hat Security Advisory

RHSA-2026:91003

libXrender security update

Released 2026-10-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) libXrender-0.9.11-8.el10_2.1, libXrender-devel-0.9.11-8.el10_2.1

TI-2026-60215 CVE-2026-88807 · GHSA-52cp-fjgx-xr28

MEDIUM 40

A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

CVSS 4.0HIGH 8.9 Network No auth User interaction EPSS 0.00263 Published 2026-09-21 Partial fix · 0.9.13 CWE-122