ELSA-2026-91267

ELSA-2026-91267 - libXrender security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-27

Description

[0.9.10-8]
- CVE-2026-88807 libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats
in RenderQueryPictFormats

Related CVEs

CVE-2026-88807

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libXrender-0.9.10-8.el8_10.src.rpm	562f7c44ed7c34a0d653068b296a690035a9f34df177527a9e53116e02fb81c8	-	ol8_aarch64_appstream
	libXrender-0.9.10-8.el8_10.aarch64.rpm	63511a1717d44d1abee9ba7312d88a6f2739e6c9f7d7e99ee7822d5069d81191	-	ol8_aarch64_appstream
	libXrender-devel-0.9.10-8.el8_10.aarch64.rpm	c0903c283002aedd305f9b75aa7c2ca4d05ce51c8b3150e9eba7e22ce35ddde3	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	libXrender-0.9.10-8.el8_10.src.rpm	562f7c44ed7c34a0d653068b296a690035a9f34df177527a9e53116e02fb81c8	-	ol8_x86_64_appstream
	libXrender-0.9.10-8.el8_10.i686.rpm	e0a9635d25dda234bed996e970b0740552049dc16d0fe1708fc578a06497d2a3	-	ol8_x86_64_appstream
	libXrender-0.9.10-8.el8_10.x86_64.rpm	30eddd68757f428027f9a4906b42d1971c51528aebff81217c2e818b532cdae7	-	ol8_x86_64_appstream
	libXrender-devel-0.9.10-8.el8_10.i686.rpm	f9cd9ab6b9c7fe8d918a39a1e8b716ccaa1e23af2689ce46824f4ac8ddf2c8ac	-	ol8_x86_64_appstream
	libXrender-devel-0.9.10-8.el8_10.x86_64.rpm	859bbfdb87850eefa8f729b6502488c37ac5af47862369bc26ee2e883d7982d4	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team