ELSA-2026-91003

ELSA-2026-91003 - libXrender security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-27

Description

[0.9.11-8.1]
- CVE-2026-88807 libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats
overflow in RenderQueryPictFormats
Resolves: RHEL-267112

Related CVEs

CVE-2026-88807

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	libXrender-0.9.11-8.el10_2.1.src.rpm	15b368a1412ba12e880d7b1e0859152e00c19fd92dfb737a4eca2762196d48a9	-	ol10_aarch64_appstream
	libXrender-0.9.11-8.el10_2.1.aarch64.rpm	5b2a82b8239e99633d33d8cfcb2f3461da31af8c5ffa347783a38331ea28895f	-	ol10_aarch64_appstream
	libXrender-devel-0.9.11-8.el10_2.1.aarch64.rpm	0e370466ebf01d960160a2e4d3d4be00dd8c9bd30d6a0388a0692a479e7d976d	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	libXrender-0.9.11-8.el10_2.1.src.rpm	15b368a1412ba12e880d7b1e0859152e00c19fd92dfb737a4eca2762196d48a9	-	ol10_x86_64_appstream
	libXrender-0.9.11-8.el10_2.1.x86_64.rpm	08e68d23fb01ed8bf4a1df6b4d132597e6c1614e110e09edfe0b5c089344d9bb	-	ol10_x86_64_appstream
	libXrender-devel-0.9.11-8.el10_2.1.x86_64.rpm	122337551fdb9e3cd14fda38598e2a7d49fc06213691aad7fe82bf5b779ef170	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team