ELSA-2026-89747

ELSA-2026-89747 - xorg-x11-server security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-26

Description

[1.20.11-28.5]
- CVE fix for: CVE-2026-88812, CVE-2026-93516, CVE-2026-93517,
CVE-2026-93518, CVE-2026-93519, CVE-2026-93520,
CVE-2026-93521, CVE-2026-93523
Resolves: https://redhat.atlassian.net/browse/RHEL-278163
Resolves: https://redhat.atlassian.net/browse/RHEL-282168
Resolves: https://redhat.atlassian.net/browse/RHEL-282195
Resolves: https://redhat.atlassian.net/browse/RHEL-282189
Resolves: https://redhat.atlassian.net/browse/RHEL-282188
Resolves: https://redhat.atlassian.net/browse/RHEL-282178
Resolves: https://redhat.atlassian.net/browse/RHEL-278173
Resolves: https://redhat.atlassian.net/browse/RHEL-278167

Related CVEs

CVE-2026-88812

CVE-2026-93516

CVE-2026-93517

CVE-2026-93518

CVE-2026-93519

CVE-2026-93520

CVE-2026-93521

CVE-2026-93523

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	xorg-x11-server-1.20.11-28.el8_10.5.src.rpm	f9e28bd240acf7b3350e2e4af0c87b372f0e6dce29ae0c0ebc910e27b5c74a59	-	ol8_aarch64_appstream
	xorg-x11-server-1.20.11-28.el8_10.5.src.rpm	f9e28bd240acf7b3350e2e4af0c87b372f0e6dce29ae0c0ebc910e27b5c74a59	-	ol8_aarch64_codeready_builder
	xorg-x11-server-Xdmx-1.20.11-28.el8_10.5.aarch64.rpm	01cc1c86eecec49813d8428c00c0e8c372727ab71c8585ade410ce1d8e90f257	-	ol8_aarch64_appstream
	xorg-x11-server-Xephyr-1.20.11-28.el8_10.5.aarch64.rpm	a15a729806ced1e06fb64ef416d84b0a4df5bf38df295101f01bcd43e3339d7f	-	ol8_aarch64_appstream
	xorg-x11-server-Xnest-1.20.11-28.el8_10.5.aarch64.rpm	ed491c02b15c5ab33949e2c79239997cd595c83922f2ca62fa87ea255464276d	-	ol8_aarch64_appstream
	xorg-x11-server-Xorg-1.20.11-28.el8_10.5.aarch64.rpm	81105eed641c3a94a35fcab74da66cee1ffb051fc8340ea4d75d88b9cdcaa444	-	ol8_aarch64_appstream
	xorg-x11-server-Xvfb-1.20.11-28.el8_10.5.aarch64.rpm	889e2e51f537fbd2392cd50fd3d7bad890917006da0e28835e348d5bccadf1fc	-	ol8_aarch64_appstream
	xorg-x11-server-common-1.20.11-28.el8_10.5.aarch64.rpm	c0b1ef63a4df3b6ac56450bf51d1f9bcd27d3f8946ccee945b92e67622be3b47	-	ol8_aarch64_appstream
	xorg-x11-server-devel-1.20.11-28.el8_10.5.aarch64.rpm	868632776d7a04d4c62b51003c43bac3911be5db8eef70b3b963fdfde7519dc3	-	ol8_aarch64_codeready_builder
	xorg-x11-server-source-1.20.11-28.el8_10.5.noarch.rpm	3f7d344179245938fe6d2d640f14eb3baf505709333d91b30ef843d8631d1a9a	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	xorg-x11-server-1.20.11-28.el8_10.5.src.rpm	f9e28bd240acf7b3350e2e4af0c87b372f0e6dce29ae0c0ebc910e27b5c74a59	-	ol8_x86_64_appstream
	xorg-x11-server-1.20.11-28.el8_10.5.src.rpm	f9e28bd240acf7b3350e2e4af0c87b372f0e6dce29ae0c0ebc910e27b5c74a59	-	ol8_x86_64_codeready_builder
	xorg-x11-server-Xdmx-1.20.11-28.el8_10.5.x86_64.rpm	5d7086bb2f70207de880670360476fc5af378b0a698e2a28361ac20859335ee3	-	ol8_x86_64_appstream
	xorg-x11-server-Xephyr-1.20.11-28.el8_10.5.x86_64.rpm	7bd6f8e76f61a25f297610e6aa3e059e0c1869bb9da2d79f23440f2ed29fb7eb	-	ol8_x86_64_appstream
	xorg-x11-server-Xnest-1.20.11-28.el8_10.5.x86_64.rpm	523beffd533ebcc469ea8ad32d1a35edb2598c705b12c39fbceda2b9519e3e8b	-	ol8_x86_64_appstream
	xorg-x11-server-Xorg-1.20.11-28.el8_10.5.x86_64.rpm	fcbfacb0003f58d11756fdb58b3571ba9f181f6dc74f7eb072f64379cab449b9	-	ol8_x86_64_appstream
	xorg-x11-server-Xvfb-1.20.11-28.el8_10.5.x86_64.rpm	e455f91a33df18df381f71c2659554b2abf01caa333f9d53bff002f3b7e715d5	-	ol8_x86_64_appstream
	xorg-x11-server-common-1.20.11-28.el8_10.5.x86_64.rpm	f7a6367c6f01444b91c46ecc3f712fd9b5ab6ca6e2686781cdc9809f86f325ef	-	ol8_x86_64_appstream
	xorg-x11-server-devel-1.20.11-28.el8_10.5.i686.rpm	859deacd1df2f20b6f09f16f292ca106b9182ab0a005f72c6050ae7f3619a0cb	-	ol8_x86_64_codeready_builder
	xorg-x11-server-devel-1.20.11-28.el8_10.5.x86_64.rpm	57abbb83b926dcd2622c23a8d5f9dc9a305fd96cee6751c08366a6e3776fed8a	-	ol8_x86_64_codeready_builder
	xorg-x11-server-source-1.20.11-28.el8_10.5.noarch.rpm	3f7d344179245938fe6d2d640f14eb3baf505709333d91b30ef843d8631d1a9a	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team