Vulnerability-Lookup

CVE-2026-33999 (GCVE-0-2026-33999)

Vulnerability from cvelistv5 – Published: 2026-04-23 14:53 – Updated: 2026-06-05 00:22

Title

Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

Summary

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

redhat

References

36 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:10739	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11369	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11656	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13414	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19125	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19343	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19344	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20555	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20560	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20561	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20563	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20575	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20576	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20590	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21699	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21715	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21716	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21718	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21741	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21742	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22424	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22456	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23254	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23255	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23496	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-33999	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	issue-trackingx_refsource_REDHAT

Impacted products

44 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:24.1.5-6.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:24.1.9-4.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:24.1.5-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION	Unaffected: 0:1.1.0-25.el6_10.16 , < * (rpm) cpe:/o:redhat:rhel_els:6
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.20.4-34.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.8.0-36.el7_9.4 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:21.1.3-20.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.20.11-28.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:1.15.0-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.20.10-4.el8_4 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:1.11.0-8.el8_4.15 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:1.20.10-4.el8_4 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:1.11.0-8.el8_4.15 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:21.1.3-2.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:1.20.11-7.el8_6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:21.1.3-2.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:1.20.11-7.el8_6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:21.1.3-2.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:1.20.11-7.el8_6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:21.1.3-13.el8_8 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:1.20.11-18.el8_8 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:1.12.0-15.el8_8.17 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:21.1.3-13.el8_8 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:1.20.11-18.el8_8 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:1.12.0-15.el8_8.17 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.15.0-6.el9_7.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:23.2.7-6.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-33.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.15.0-7.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.20.11-34.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:24.1.9-4.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:21.1.3-5.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:1.20.11-13.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:1.11.0-22.el9_0.17 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:21.1.3-10.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.20.11-20.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.12.0-14.el9_2.14 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:1.20.11-28.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:22.1.9-8.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::appstream
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:1.13.1-8.el9_4.9 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::appstream
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.20.11-33.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:23.2.7-6.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.14.1-10.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Date Public

2026-04-23 14:11

Credits

Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33999",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-24T03:55:33.895310Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-18T20:20:10.145Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.1"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:24.1.5-6.el10_1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:24.1.9-4.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:24.1.5-6.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.1.0-25.el6_10.16",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.4-34.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.8.0-36.el7_9.4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-20.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-28.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.15.0-9.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.10-4.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.15",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.10-4.el8_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-8.el8_4.15",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-2.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-7.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-2.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-7.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-2.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-7.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-13.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-18.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.17",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-13.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-18.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-15.el8_8.17",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.15.0-6.el9_7.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.2.7-6.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-33.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.15.0-7.el9_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-34.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:24.1.9-4.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-5.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-13.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.11.0-22.el9_0.17",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.1.3-10.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-20.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.12.0-14.el9_2.14",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream",
            "cpe:/a:redhat:rhel_eus:9.4::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-28.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:22.1.9-8.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.13.1-8.el9_4.9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/a:redhat:rhel_eus:9.6::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.20.11-33.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/a:redhat:rhel_eus:9.6::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "xorg-x11-server-Xwayland",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.2.7-6.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "tigervnc",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.14.1-10.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "xorg-x11-server",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue."
        }
      ],
      "datePublic": "2026-04-23T14:11:12.550Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-05T00:22:24.713Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:10739",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:10739"
        },
        {
          "name": "RHSA-2026:11352",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11352"
        },
        {
          "name": "RHSA-2026:11369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11369"
        },
        {
          "name": "RHSA-2026:11388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11388"
        },
        {
          "name": "RHSA-2026:11656",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11656"
        },
        {
          "name": "RHSA-2026:11692",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11692"
        },
        {
          "name": "RHSA-2026:13414",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:13414"
        },
        {
          "name": "RHSA-2026:19125",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19125"
        },
        {
          "name": "RHSA-2026:19342",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19342"
        },
        {
          "name": "RHSA-2026:19343",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19343"
        },
        {
          "name": "RHSA-2026:19344",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19344"
        },
        {
          "name": "RHSA-2026:20547",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20547"
        },
        {
          "name": "RHSA-2026:20555",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20555"
        },
        {
          "name": "RHSA-2026:20557",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20557"
        },
        {
          "name": "RHSA-2026:20558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20558"
        },
        {
          "name": "RHSA-2026:20560",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20560"
        },
        {
          "name": "RHSA-2026:20561",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20561"
        },
        {
          "name": "RHSA-2026:20562",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20562"
        },
        {
          "name": "RHSA-2026:20563",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20563"
        },
        {
          "name": "RHSA-2026:20575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20575"
        },
        {
          "name": "RHSA-2026:20576",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20576"
        },
        {
          "name": "RHSA-2026:20590",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:20590"
        },
        {
          "name": "RHSA-2026:21699",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21699"
        },
        {
          "name": "RHSA-2026:21712",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21712"
        },
        {
          "name": "RHSA-2026:21715",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21715"
        },
        {
          "name": "RHSA-2026:21716",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21716"
        },
        {
          "name": "RHSA-2026:21718",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21718"
        },
        {
          "name": "RHSA-2026:21741",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21741"
        },
        {
          "name": "RHSA-2026:21742",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:21742"
        },
        {
          "name": "RHSA-2026:22424",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22424"
        },
        {
          "name": "RHSA-2026:22456",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22456"
        },
        {
          "name": "RHSA-2026:23254",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:23254"
        },
        {
          "name": "RHSA-2026:23255",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:23255"
        },
        {
          "name": "RHSA-2026:23496",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:23496"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
        },
        {
          "name": "RHBZ#2451106",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-25T06:29:19.544Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-23T14:11:12.550Z",
          "value": "Made public."
        }
      ],
      "title": "Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-191: Integer Underflow (Wrap or Wraparound)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-33999",
    "datePublished": "2026-04-23T14:53:59.414Z",
    "dateReserved": "2026-03-25T04:53:13.614Z",
    "dateUpdated": "2026-06-05T00:22:24.713Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-33999",
      "date": "2026-06-05",
      "epss": "5e-05",
      "percentile": "0.00218"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-33999\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-04-23T16:16:24.623\",\"lastModified\":\"2026-06-05T02:17:11.550\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-191\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10739\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11352\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11369\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11388\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11656\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11692\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13414\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19125\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19342\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19343\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19344\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20547\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20555\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20557\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20558\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20560\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20561\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20562\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20563\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20575\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20576\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20590\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21699\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21712\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21715\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21716\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21718\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21741\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21742\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22424\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22456\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23254\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23255\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23496\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-33999\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2451106\",\"source\":\"secalert@redhat.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33999\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-24T03:55:33.895310Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-24T13:37:04.491Z\"}}], \"cna\": {\"title\": \"Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.5-6.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.9-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.5-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.0-25.el6_10.16\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.4-34.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.8.0-36.el7_9.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-20.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/a:redhat:enterprise_linux:8::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-28.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-9.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.10-4.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-8.el8_4.15\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.10-4.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-8.el8_4.15\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-7.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-7.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-2.el8_6.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-7.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-13.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-18.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-15.el8_8.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-13.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-18.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-15.el8_8.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-6.el9_7.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.2.7-6.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-33.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.15.0-7.el9_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-34.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.1.9-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-5.el9_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-13.el9_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.11.0-22.el9_0.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.1.3-10.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-20.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.12.0-14.el9_2.14\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-28.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:22.1.9-8.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.13.1-8.el9_4.9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.20.11-33.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.2.7-6.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xorg-x11-server-Xwayland\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.14.1-10.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"tigervnc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"xorg-x11-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-25T06:29:19.544Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-23T14:11:12.550Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-04-23T14:11:12.550Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:10739\", \"name\": \"RHSA-2026:10739\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11352\", \"name\": \"RHSA-2026:11352\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11369\", \"name\": \"RHSA-2026:11369\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11388\", \"name\": \"RHSA-2026:11388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11656\", \"name\": \"RHSA-2026:11656\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11692\", \"name\": \"RHSA-2026:11692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13414\", \"name\": \"RHSA-2026:13414\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19125\", \"name\": \"RHSA-2026:19125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19342\", \"name\": \"RHSA-2026:19342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19343\", \"name\": \"RHSA-2026:19343\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19344\", \"name\": \"RHSA-2026:19344\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20547\", \"name\": \"RHSA-2026:20547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20555\", \"name\": \"RHSA-2026:20555\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20557\", \"name\": \"RHSA-2026:20557\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20558\", \"name\": \"RHSA-2026:20558\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20560\", \"name\": \"RHSA-2026:20560\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20561\", \"name\": \"RHSA-2026:20561\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20562\", \"name\": \"RHSA-2026:20562\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20563\", \"name\": \"RHSA-2026:20563\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20575\", \"name\": \"RHSA-2026:20575\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20576\", \"name\": \"RHSA-2026:20576\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20590\", \"name\": \"RHSA-2026:20590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21699\", \"name\": \"RHSA-2026:21699\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21712\", \"name\": \"RHSA-2026:21712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21715\", \"name\": \"RHSA-2026:21715\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21716\", \"name\": \"RHSA-2026:21716\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21718\", \"name\": \"RHSA-2026:21718\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21741\", \"name\": \"RHSA-2026:21741\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21742\", \"name\": \"RHSA-2026:21742\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22424\", \"name\": \"RHSA-2026:22424\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22456\", \"name\": \"RHSA-2026:22456\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23254\", \"name\": \"RHSA-2026:23254\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23255\", \"name\": \"RHSA-2026:23255\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23496\", \"name\": \"RHSA-2026:23496\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-33999\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2451106\", \"name\": \"RHBZ#2451106\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-191\", \"description\": \"Integer Underflow (Wrap or Wraparound)\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-06-05T00:22:24.713Z\"}, \"x_redhatCweChain\": \"CWE-191: Integer Underflow (Wrap or Wraparound)\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-33999\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-05T00:22:24.713Z\", \"dateReserved\": \"2026-03-25T04:53:13.614Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-04-23T14:53:59.414Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-33999

Vulnerability from fkie_nvd - Published: 2026-04-23 16:16 - Updated: 2026-06-05 02:17

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:10739
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:11352
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:11369
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:11388
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:11656
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:11692
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:13414
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:19125
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:19342
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:19343
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:19344
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20547
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20555
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20557
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20558
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20560
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20561
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20562
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20563
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20575
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20576
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:20590
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21699
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21712
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21715
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21716
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21718
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21741
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:21742
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:22424
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:22456
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:23254
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:23255
	secalert@redhat.com	https://access.redhat.com/errata/RHSA-2026:23496
	secalert@redhat.com	https://access.redhat.com/security/cve/CVE-2026-33999
	secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=2451106

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts."
    }
  ],
  "id": "CVE-2026-33999",
  "lastModified": "2026-06-05T02:17:11.550",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secalert@redhat.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-04-23T16:16:24.623",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:10739"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:11352"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:11369"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:11388"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:11656"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:11692"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:13414"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:19125"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:19342"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:19343"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:19344"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20547"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20555"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20557"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20558"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20560"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20561"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20562"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20563"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20575"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20576"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:20590"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21699"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21712"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21715"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21716"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21718"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21741"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:21742"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:22424"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:22456"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:23254"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:23255"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2026:23496"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-191"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    }
  ]
}

GHSA-G562-3MH5-27V6

Vulnerability from github – Published: 2026-04-23 18:33 – Updated: 2026-06-05 03:31

Details

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-33999"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-191"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-23T16:16:24Z",
    "severity": "HIGH"
  },
  "details": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
  "id": "GHSA-g562-3mh5-27v6",
  "modified": "2026-06-05T03:31:29Z",
  "published": "2026-04-23T18:33:03Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:10739"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20575"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20576"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20590"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21699"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21712"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21715"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21716"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21718"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21741"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:21742"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22424"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:22456"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:23254"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:23255"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:23496"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:11352"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:11369"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:11388"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:11656"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:11692"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:13414"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19125"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19342"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19343"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:19344"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20547"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20555"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20557"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20558"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20560"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20561"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20562"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:20563"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

MSRC_CVE-2026-33999

Vulnerability from csaf_microsoft - Published: 2026-04-02 00:00 - Updated: 2026-05-06 14:43

Summary

Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

CVE-2026-33999

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 21247-17084		—
Unresolved product id: 21316-17084		—

Known affected 3 products

Product	Version	Remediation
Unresolved product id: 17086-3	—	None Available
Unresolved product id: 17084-2	—	Vendor Fix fix
Unresolved product id: 17084-1	—	Vendor Fix fix

References

4 references

URL	Category
https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-33999 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33999.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling",
    "tracking": {
      "current_release_date": "2026-05-06T14:43:53.000Z",
      "generator": {
        "date": "2026-05-07T08:29:04.777Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-33999",
      "initial_release_date": "2026-04-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-04-29T01:11:14.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-05-06T01:42:13.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2026-05-06T14:43:53.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              },
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "cbl2 xorg-x11-server 0:1.20.10-16.cbl2",
                "product": {
                  "name": "cbl2 xorg-x11-server 0:1.20.10-16.cbl2",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "xorg-x11-server"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 xorg-x11-server-Xwayland 0:24.1.6-3.azl3",
                "product": {
                  "name": "\u003cazl3 xorg-x11-server-Xwayland 0:24.1.6-3.azl3",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 xorg-x11-server-Xwayland 0:24.1.6-3.azl3",
                "product": {
                  "name": "azl3 xorg-x11-server-Xwayland 0:24.1.6-3.azl3",
                  "product_id": "21247"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 xorg-x11-server-Xwayland 0:24.1.6-4.azl3",
                "product": {
                  "name": "\u003cazl3 xorg-x11-server-Xwayland 0:24.1.6-4.azl3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 xorg-x11-server-Xwayland 0:24.1.6-4.azl3",
                "product": {
                  "name": "azl3 xorg-x11-server-Xwayland 0:24.1.6-4.azl3",
                  "product_id": "21316"
                }
              }
            ],
            "category": "product_name",
            "name": "xorg-x11-server-Xwayland"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 xorg-x11-server 0:1.20.10-16.cbl2 as a component of CBL Mariner 2.0",
          "product_id": "17086-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 xorg-x11-server-Xwayland 0:24.1.6-3.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 xorg-x11-server-Xwayland 0:24.1.6-3.azl3 as a component of Azure Linux 3.0",
          "product_id": "21247-17084"
        },
        "product_reference": "21247",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 xorg-x11-server-Xwayland 0:24.1.6-4.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 xorg-x11-server-Xwayland 0:24.1.6-4.azl3 as a component of Azure Linux 3.0",
          "product_id": "21316-17084"
        },
        "product_reference": "21316",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33999",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "21247-17084",
          "21316-17084"
        ],
        "known_affected": [
          "17086-3",
          "17084-2",
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-33999 Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33999.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-04-29T01:11:14.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17086-3"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2026-04-29T01:11:14.000Z",
          "details": "0:24.1.6-4.azl3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-2",
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "17086-3",
            "17084-2",
            "17084-1"
          ]
        }
      ],
      "title": "Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling"
    }
  ]
}

OPENSUSE-SU-2026:10556-1

Vulnerability from csaf_opensuse - Published: 2026-04-15 00:00 - Updated: 2026-04-15 00:00

Summary

xorg-x11-server-21.1.21-5.1 on GA media

Severity

Moderate

Notes

Title of the patch: xorg-x11-server-21.1.21-5.1 on GA media

Description of the patch: These are all security issues fixed in the xorg-x11-server-21.1.21-5.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-10556

CVE-2026-33999

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 24 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34000

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 24 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34001

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 24 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-34002

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 24 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34003

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 24 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-33999/	self
https://www.suse.com/security/cve/CVE-2026-34000/	self
https://www.suse.com/security/cve/CVE-2026-34001/	self
https://www.suse.com/security/cve/CVE-2026-34002/	self
https://www.suse.com/security/cve/CVE-2026-34003/	self
https://www.suse.com/security/cve/CVE-2026-33999	external
https://bugzilla.suse.com/1260922	external
https://www.suse.com/security/cve/CVE-2026-34000	external
https://bugzilla.suse.com/1260923	external
https://www.suse.com/security/cve/CVE-2026-34001	external
https://bugzilla.suse.com/1260924	external
https://www.suse.com/security/cve/CVE-2026-34002	external
https://bugzilla.suse.com/1260925	external
https://www.suse.com/security/cve/CVE-2026-34003	external
https://bugzilla.suse.com/1260926	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "xorg-x11-server-21.1.21-5.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the xorg-x11-server-21.1.21-5.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10556",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10556-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33999 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33999/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34000 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34001 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34001/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34002 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34002/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34003 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34003/"
      }
    ],
    "title": "xorg-x11-server-21.1.21-5.1 on GA media",
    "tracking": {
      "current_release_date": "2026-04-15T00:00:00Z",
      "generator": {
        "date": "2026-04-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10556-1",
      "initial_release_date": "2026-04-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-04-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-21.1.21-5.1.aarch64",
                "product": {
                  "name": "xorg-x11-server-21.1.21-5.1.aarch64",
                  "product_id": "xorg-x11-server-21.1.21-5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
                  "product_id": "xorg-x11-server-Xvfb-21.1.21-5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-21.1.21-5.1.aarch64",
                "product": {
                  "name": "xorg-x11-server-extra-21.1.21-5.1.aarch64",
                  "product_id": "xorg-x11-server-extra-21.1.21-5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-21.1.21-5.1.aarch64",
                "product": {
                  "name": "xorg-x11-server-sdk-21.1.21-5.1.aarch64",
                  "product_id": "xorg-x11-server-sdk-21.1.21-5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-source-21.1.21-5.1.aarch64",
                "product": {
                  "name": "xorg-x11-server-source-21.1.21-5.1.aarch64",
                  "product_id": "xorg-x11-server-source-21.1.21-5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
                "product": {
                  "name": "xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
                  "product_id": "xorg-x11-server-wrapper-21.1.21-5.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-21.1.21-5.1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-21.1.21-5.1.ppc64le",
                  "product_id": "xorg-x11-server-21.1.21-5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
                  "product_id": "xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-21.1.21-5.1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-extra-21.1.21-5.1.ppc64le",
                  "product_id": "xorg-x11-server-extra-21.1.21-5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
                  "product_id": "xorg-x11-server-sdk-21.1.21-5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-source-21.1.21-5.1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-source-21.1.21-5.1.ppc64le",
                  "product_id": "xorg-x11-server-source-21.1.21-5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
                  "product_id": "xorg-x11-server-wrapper-21.1.21-5.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-21.1.21-5.1.s390x",
                "product": {
                  "name": "xorg-x11-server-21.1.21-5.1.s390x",
                  "product_id": "xorg-x11-server-21.1.21-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
                "product": {
                  "name": "xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
                  "product_id": "xorg-x11-server-Xvfb-21.1.21-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-21.1.21-5.1.s390x",
                "product": {
                  "name": "xorg-x11-server-extra-21.1.21-5.1.s390x",
                  "product_id": "xorg-x11-server-extra-21.1.21-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-21.1.21-5.1.s390x",
                "product": {
                  "name": "xorg-x11-server-sdk-21.1.21-5.1.s390x",
                  "product_id": "xorg-x11-server-sdk-21.1.21-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-source-21.1.21-5.1.s390x",
                "product": {
                  "name": "xorg-x11-server-source-21.1.21-5.1.s390x",
                  "product_id": "xorg-x11-server-source-21.1.21-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-wrapper-21.1.21-5.1.s390x",
                "product": {
                  "name": "xorg-x11-server-wrapper-21.1.21-5.1.s390x",
                  "product_id": "xorg-x11-server-wrapper-21.1.21-5.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-21.1.21-5.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-21.1.21-5.1.x86_64",
                  "product_id": "xorg-x11-server-21.1.21-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
                  "product_id": "xorg-x11-server-Xvfb-21.1.21-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-extra-21.1.21-5.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-extra-21.1.21-5.1.x86_64",
                  "product_id": "xorg-x11-server-extra-21.1.21-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-sdk-21.1.21-5.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-sdk-21.1.21-5.1.x86_64",
                  "product_id": "xorg-x11-server-sdk-21.1.21-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-source-21.1.21-5.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-source-21.1.21-5.1.x86_64",
                  "product_id": "xorg-x11-server-source-21.1.21-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-wrapper-21.1.21-5.1.x86_64",
                "product": {
                  "name": "xorg-x11-server-wrapper-21.1.21-5.1.x86_64",
                  "product_id": "xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-21.1.21-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64"
        },
        "product_reference": "xorg-x11-server-21.1.21-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-21.1.21-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le"
        },
        "product_reference": "xorg-x11-server-21.1.21-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-21.1.21-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x"
        },
        "product_reference": "xorg-x11-server-21.1.21-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-21.1.21-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64"
        },
        "product_reference": "xorg-x11-server-21.1.21-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-21.1.21-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-21.1.21-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x"
        },
        "product_reference": "xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-21.1.21-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-21.1.21-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64"
        },
        "product_reference": "xorg-x11-server-extra-21.1.21-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-21.1.21-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le"
        },
        "product_reference": "xorg-x11-server-extra-21.1.21-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-21.1.21-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x"
        },
        "product_reference": "xorg-x11-server-extra-21.1.21-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-extra-21.1.21-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64"
        },
        "product_reference": "xorg-x11-server-extra-21.1.21-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-21.1.21-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64"
        },
        "product_reference": "xorg-x11-server-sdk-21.1.21-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-21.1.21-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le"
        },
        "product_reference": "xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-21.1.21-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x"
        },
        "product_reference": "xorg-x11-server-sdk-21.1.21-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-sdk-21.1.21-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64"
        },
        "product_reference": "xorg-x11-server-sdk-21.1.21-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-source-21.1.21-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64"
        },
        "product_reference": "xorg-x11-server-source-21.1.21-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-source-21.1.21-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le"
        },
        "product_reference": "xorg-x11-server-source-21.1.21-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-source-21.1.21-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x"
        },
        "product_reference": "xorg-x11-server-source-21.1.21-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-source-21.1.21-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64"
        },
        "product_reference": "xorg-x11-server-source-21.1.21-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-wrapper-21.1.21-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64"
        },
        "product_reference": "xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-wrapper-21.1.21-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le"
        },
        "product_reference": "xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-wrapper-21.1.21-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x"
        },
        "product_reference": "xorg-x11-server-wrapper-21.1.21-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-wrapper-21.1.21-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
        },
        "product_reference": "xorg-x11-server-wrapper-21.1.21-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33999",
          "url": "https://www.suse.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260922 for CVE-2026-33999",
          "url": "https://bugzilla.suse.com/1260922"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33999"
    },
    {
      "cve": "CVE-2026-34000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34000",
          "url": "https://www.suse.com/security/cve/CVE-2026-34000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260923 for CVE-2026-34000",
          "url": "https://bugzilla.suse.com/1260923"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34000"
    },
    {
      "cve": "CVE-2026-34001",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34001"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34001",
          "url": "https://www.suse.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260924 for CVE-2026-34001",
          "url": "https://bugzilla.suse.com/1260924"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34001"
    },
    {
      "cve": "CVE-2026-34002",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34002"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34002",
          "url": "https://www.suse.com/security/cve/CVE-2026-34002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260925 for CVE-2026-34002",
          "url": "https://bugzilla.suse.com/1260925"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34002"
    },
    {
      "cve": "CVE-2026-34003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
          "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34003",
          "url": "https://www.suse.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260926 for CVE-2026-34003",
          "url": "https://bugzilla.suse.com/1260926"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-Xvfb-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-extra-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-sdk-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-source-21.1.21-5.1.x86_64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.aarch64",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.ppc64le",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.s390x",
            "openSUSE Tumbleweed:xorg-x11-server-wrapper-21.1.21-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34003"
    }
  ]
}

OPENSUSE-SU-2026:10557-1

Vulnerability from csaf_opensuse - Published: 2026-04-15 00:00 - Updated: 2026-04-15 00:00

Summary

xwayland-24.1.9-2.1 on GA media

Severity

Moderate

Notes

Title of the patch: xwayland-24.1.9-2.1 on GA media

Description of the patch: These are all security issues fixed in the xwayland-24.1.9-2.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-10557

CVE-2026-33999

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34000

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34001

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-34002

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-34003

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-33999/	self
https://www.suse.com/security/cve/CVE-2026-34000/	self
https://www.suse.com/security/cve/CVE-2026-34001/	self
https://www.suse.com/security/cve/CVE-2026-34002/	self
https://www.suse.com/security/cve/CVE-2026-34003/	self
https://www.suse.com/security/cve/CVE-2026-33999	external
https://bugzilla.suse.com/1260922	external
https://www.suse.com/security/cve/CVE-2026-34000	external
https://bugzilla.suse.com/1260923	external
https://www.suse.com/security/cve/CVE-2026-34001	external
https://bugzilla.suse.com/1260924	external
https://www.suse.com/security/cve/CVE-2026-34002	external
https://bugzilla.suse.com/1260925	external
https://www.suse.com/security/cve/CVE-2026-34003	external
https://bugzilla.suse.com/1260926	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "xwayland-24.1.9-2.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the xwayland-24.1.9-2.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10557",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10557-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33999 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33999/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34000 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34001 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34001/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34002 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34002/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34003 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34003/"
      }
    ],
    "title": "xwayland-24.1.9-2.1 on GA media",
    "tracking": {
      "current_release_date": "2026-04-15T00:00:00Z",
      "generator": {
        "date": "2026-04-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10557-1",
      "initial_release_date": "2026-04-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-04-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xwayland-24.1.9-2.1.aarch64",
                "product": {
                  "name": "xwayland-24.1.9-2.1.aarch64",
                  "product_id": "xwayland-24.1.9-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xwayland-devel-24.1.9-2.1.aarch64",
                "product": {
                  "name": "xwayland-devel-24.1.9-2.1.aarch64",
                  "product_id": "xwayland-devel-24.1.9-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xwayland-24.1.9-2.1.ppc64le",
                "product": {
                  "name": "xwayland-24.1.9-2.1.ppc64le",
                  "product_id": "xwayland-24.1.9-2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xwayland-devel-24.1.9-2.1.ppc64le",
                "product": {
                  "name": "xwayland-devel-24.1.9-2.1.ppc64le",
                  "product_id": "xwayland-devel-24.1.9-2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xwayland-24.1.9-2.1.s390x",
                "product": {
                  "name": "xwayland-24.1.9-2.1.s390x",
                  "product_id": "xwayland-24.1.9-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xwayland-devel-24.1.9-2.1.s390x",
                "product": {
                  "name": "xwayland-devel-24.1.9-2.1.s390x",
                  "product_id": "xwayland-devel-24.1.9-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xwayland-24.1.9-2.1.x86_64",
                "product": {
                  "name": "xwayland-24.1.9-2.1.x86_64",
                  "product_id": "xwayland-24.1.9-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xwayland-devel-24.1.9-2.1.x86_64",
                "product": {
                  "name": "xwayland-devel-24.1.9-2.1.x86_64",
                  "product_id": "xwayland-devel-24.1.9-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-24.1.9-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64"
        },
        "product_reference": "xwayland-24.1.9-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-24.1.9-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le"
        },
        "product_reference": "xwayland-24.1.9-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-24.1.9-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x"
        },
        "product_reference": "xwayland-24.1.9-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-24.1.9-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64"
        },
        "product_reference": "xwayland-24.1.9-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-devel-24.1.9-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64"
        },
        "product_reference": "xwayland-devel-24.1.9-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-devel-24.1.9-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le"
        },
        "product_reference": "xwayland-devel-24.1.9-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-devel-24.1.9-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x"
        },
        "product_reference": "xwayland-devel-24.1.9-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xwayland-devel-24.1.9-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
        },
        "product_reference": "xwayland-devel-24.1.9-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33999",
          "url": "https://www.suse.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260922 for CVE-2026-33999",
          "url": "https://bugzilla.suse.com/1260922"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33999"
    },
    {
      "cve": "CVE-2026-34000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34000",
          "url": "https://www.suse.com/security/cve/CVE-2026-34000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260923 for CVE-2026-34000",
          "url": "https://bugzilla.suse.com/1260923"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34000"
    },
    {
      "cve": "CVE-2026-34001",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34001"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34001",
          "url": "https://www.suse.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260924 for CVE-2026-34001",
          "url": "https://bugzilla.suse.com/1260924"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34001"
    },
    {
      "cve": "CVE-2026-34002",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34002"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34002",
          "url": "https://www.suse.com/security/cve/CVE-2026-34002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260925 for CVE-2026-34002",
          "url": "https://bugzilla.suse.com/1260925"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34002"
    },
    {
      "cve": "CVE-2026-34003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
          "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34003",
          "url": "https://www.suse.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260926 for CVE-2026-34003",
          "url": "https://bugzilla.suse.com/1260926"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-24.1.9-2.1.x86_64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.aarch64",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.ppc64le",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.s390x",
            "openSUSE Tumbleweed:xwayland-devel-24.1.9-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-04-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34003"
    }
  ]
}

RHSA-2026:10739

Vulnerability from csaf_redhat - Published: 2026-04-27 08:36 - Updated: 2026-06-05 00:40

Summary

Red Hat Security Advisory: tigervnc security update

Severity

Important

Notes

Topic: An update for tigervnc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-33999

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34001

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34003

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34352

A flaw was found in TigerVNC's x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service (DoS).

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-279 - Incorrect Execution-Assigned Permissions

Affected products

Fixed 40 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

27 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:10739	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://bugzilla.redhat.com/show_bug.cgi?id=2452022	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://www.cve.org/CVERecord?id=CVE-2026-33999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33999	external
https://access.redhat.com/security/cve/CVE-2026-34001	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://www.cve.org/CVERecord?id=CVE-2026-34001	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34001	external
https://access.redhat.com/security/cve/CVE-2026-34003	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://www.cve.org/CVERecord?id=CVE-2026-34003	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34003	external
https://access.redhat.com/security/cve/CVE-2026-34352	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452022	external
https://www.cve.org/CVERecord?id=CVE-2026-34352	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34352	external
https://github.com/TigerVNC/tigervnc/commit/0b5ca…	external
https://groups.google.com/g/tigervnc-announce/c/a…	external
https://sourceforge.net/projects/tigervnc/files/s…	external
https://www.openwall.com/lists/oss-security/2026/…	external

Acknowledgments

TrendAI Zero Day Initiative Jan-Niklas Sohn

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tigervnc is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\n* TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions (CVE-2026-34352)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:10739",
        "url": "https://access.redhat.com/errata/RHSA-2026:10739"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
      },
      {
        "category": "external",
        "summary": "2451109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
      },
      {
        "category": "external",
        "summary": "2451113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
      },
      {
        "category": "external",
        "summary": "2452022",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452022"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10739.json"
      }
    ],
    "title": "Red Hat Security Advisory: tigervnc security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:40:13+00:00",
      "generator": {
        "date": "2026-06-05T00:40:13+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:10739",
      "initial_release_date": "2026-04-27T08:36:07+00:00",
      "revision_history": [
        {
          "date": "2026-04-27T08:36:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-27T08:36:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:40:13+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-6.el9_7.1.src",
                "product": {
                  "name": "tigervnc-0:1.15.0-6.el9_7.1.src",
                  "product_id": "tigervnc-0:1.15.0-6.el9_7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                "product": {
                  "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_id": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                "product": {
                  "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_id": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                "product": {
                  "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_id": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debugsource@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-debuginfo@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-debuginfo@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-minimal-debuginfo@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                "product": {
                  "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_id": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-server-module-debuginfo@1.15.0-6.el9_7.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
                "product": {
                  "name": "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
                  "product_id": "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-icons@1.15.0-6.el9_7.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
                "product": {
                  "name": "tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
                  "product_id": "tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-license@1.15.0-6.el9_7.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
                "product": {
                  "name": "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
                  "product_id": "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tigervnc-selinux@1.15.0-6.el9_7.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-6.el9_7.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src"
        },
        "product_reference": "tigervnc-0:1.15.0-6.el9_7.1.src",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch"
        },
        "product_reference": "tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-license-0:1.15.0-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch"
        },
        "product_reference": "tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch"
        },
        "product_reference": "tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64"
        },
        "product_reference": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le"
        },
        "product_reference": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x"
        },
        "product_reference": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        },
        "product_reference": "tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-33999",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-03-25T06:29:19.544586+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important integer underflow vulnerability exists in the X.Org X server\u0027s XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
        }
      ],
      "release_date": "2026-04-23T14:11:12.550000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-27T08:36:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10739"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34001",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-03-25T07:00:05.329048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This use-after-free vulnerability in the X.Org X server\u0027s XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34001",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001"
        }
      ],
      "release_date": "2026-04-23T14:14:42.224000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-27T08:36:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10739"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34003",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-03-25T07:19:13.949261+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important out-of-bounds memory access vulnerability exists in the X.Org X server\u0027s XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34003",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003"
        }
      ],
      "release_date": "2026-04-23T14:18:00.653000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-27T08:36:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10739"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access"
    },
    {
      "cve": "CVE-2026-34352",
      "cwe": {
        "id": "CWE-279",
        "name": "Incorrect Execution-Assigned Permissions"
      },
      "discovery_date": "2026-03-26T23:01:46.925344+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2452022"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in TigerVNC\u0027s x0vncserver component. Due to incorrect permissions in the Image.cxx file, other users on the system can observe or manipulate the screen contents of a running session. This vulnerability could also lead to an application crash, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
          "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
          "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34352"
        },
        {
          "category": "external",
          "summary": "RHBZ#2452022",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452022"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34352",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34352"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34352",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34352"
        },
        {
          "category": "external",
          "summary": "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393",
          "url": "https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI",
          "url": "https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI"
        },
        {
          "category": "external",
          "summary": "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2",
          "url": "https://sourceforge.net/projects/tigervnc/files/stable/1.16.2"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/03/26/7",
          "url": "https://www.openwall.com/lists/oss-security/2026/03/26/7"
        }
      ],
      "release_date": "2026-03-26T22:30:46.928000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-27T08:36:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:10739"
        },
        {
          "category": "workaround",
          "details": "The x0vncserver component should be disabled if not actively required. If x0vncserver is necessary, ensure that only trusted users have access to the system where it is running. To disable the x0vncserver service, if it is running as a systemd service, you can use: `sudo systemctl stop x0vncserver.service` `sudo systemctl disable x0vncserver.service` If x0vncserver is launched manually, avoid running it in multi-user environments. A service restart or system reboot may be required for changes to take full effect.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.src",
            "AppStream-9.7.0.Z.MAIN:tigervnc-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-debugsource-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-icons-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-license-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-selinux-0:1.15.0-6.el9_7.1.noarch",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-minimal-debuginfo-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-0:1.15.0-6.el9_7.1.x86_64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.aarch64",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.ppc64le",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.s390x",
            "AppStream-9.7.0.Z.MAIN:tigervnc-server-module-debuginfo-0:1.15.0-6.el9_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions"
    }
  ]
}

RHSA-2026:11352

Vulnerability from csaf_redhat - Published: 2026-04-28 11:29 - Updated: 2026-06-05 00:39

Summary

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Severity

Important

Notes

Topic: An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-33999

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 34 products

Product	Version	Remediation
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34001

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 34 products

Product	Version	Remediation
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34003

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 34 products

Product	Version	Remediation
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

18 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:11352	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://www.cve.org/CVERecord?id=CVE-2026-33999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33999	external
https://access.redhat.com/security/cve/CVE-2026-34001	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://www.cve.org/CVERecord?id=CVE-2026-34001	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34001	external
https://access.redhat.com/security/cve/CVE-2026-34003	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://www.cve.org/CVERecord?id=CVE-2026-34003	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34003	external

Acknowledgments

TrendAI Zero Day Initiative Jan-Niklas Sohn

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:11352",
        "url": "https://access.redhat.com/errata/RHSA-2026:11352"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
      },
      {
        "category": "external",
        "summary": "2451109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
      },
      {
        "category": "external",
        "summary": "2451113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11352.json"
      }
    ],
    "title": "Red Hat Security Advisory: xorg-x11-server-Xwayland security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:39:43+00:00",
      "generator": {
        "date": "2026-06-05T00:39:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:11352",
      "initial_release_date": "2026-04-28T11:29:51+00:00",
      "revision_history": [
        {
          "date": "2026-04-28T11:29:51+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-28T11:29:51+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:39:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.5-6.el10_1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.5-6.el10_1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.5-6.el10_1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.5-6.el10_1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.5-6.el10_1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.5-6.el10_1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.5-6.el10_1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.5-6.el10_1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.5-6.el10_1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.5-6.el10_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.5-6.el10_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.5-6.el10_1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.5-6.el10_1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
                  "product_id": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@24.1.5-6.el10_1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@24.1.5-6.el10_1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@24.1.5-6.el10_1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@24.1.5-6.el10_1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "AppStream-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
        "relates_to_product_reference": "CRB-10.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
        "relates_to_product_reference": "CRB-10.1.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-33999",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-03-25T06:29:19.544586+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important integer underflow vulnerability exists in the X.Org X server\u0027s XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
        }
      ],
      "release_date": "2026-04-23T14:11:12.550000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T11:29:51+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11352"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.",
          "product_ids": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34001",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-03-25T07:00:05.329048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This use-after-free vulnerability in the X.Org X server\u0027s XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34001",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001"
        }
      ],
      "release_date": "2026-04-23T14:14:42.224000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T11:29:51+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11352"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.",
          "product_ids": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34003",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-03-25T07:19:13.949261+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important out-of-bounds memory access vulnerability exists in the X.Org X server\u0027s XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
          "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
          "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34003",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003"
        }
      ],
      "release_date": "2026-04-23T14:18:00.653000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T11:29:51+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11352"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "AppStream-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.src",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debuginfo-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-debugsource-0:24.1.5-6.el10_1.x86_64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.aarch64",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.ppc64le",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.s390x",
            "CRB-10.1.Z:xorg-x11-server-Xwayland-devel-0:24.1.5-6.el10_1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access"
    }
  ]
}

RHSA-2026:11369

Vulnerability from csaf_redhat - Published: 2026-04-28 15:01 - Updated: 2026-06-05 00:39

Summary

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Severity

Important

Notes

Topic: An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2026-33999

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 42 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34001

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 42 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34003

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 42 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

18 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:11369	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://www.cve.org/CVERecord?id=CVE-2026-33999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33999	external
https://access.redhat.com/security/cve/CVE-2026-34001	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://www.cve.org/CVERecord?id=CVE-2026-34001	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34001	external
https://access.redhat.com/security/cve/CVE-2026-34003	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://www.cve.org/CVERecord?id=CVE-2026-34003	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34003	external

Acknowledgments

TrendAI Zero Day Initiative Jan-Niklas Sohn

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:11369",
        "url": "https://access.redhat.com/errata/RHSA-2026:11369"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
      },
      {
        "category": "external",
        "summary": "2451109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
      },
      {
        "category": "external",
        "summary": "2451113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11369.json"
      }
    ],
    "title": "Red Hat Security Advisory: xorg-x11-server-Xwayland security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:39:25+00:00",
      "generator": {
        "date": "2026-06-05T00:39:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:11369",
      "initial_release_date": "2026-04-28T15:01:21+00:00",
      "revision_history": [
        {
          "date": "2026-04-28T15:01:21+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-28T15:01:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:39:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                  "product_id": "CRB-9.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
                  "product_id": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@23.2.7-6.el9_7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@23.2.7-6.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@23.2.7-6.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@23.2.7-6.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@23.2.7-6.el9_7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@23.2.7-6.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@23.2.7-6.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@23.2.7-6.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@23.2.7-6.el9_7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@23.2.7-6.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@23.2.7-6.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@23.2.7-6.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@23.2.7-6.el9_7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@23.2.7-6.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@23.2.7-6.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@23.2.7-6.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@23.2.7-6.el9_7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
                  "product_id": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@23.2.7-6.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
                  "product_id": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-devel@23.2.7-6.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@23.2.7-6.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@23.2.7-6.el9_7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-33999",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-03-25T06:29:19.544586+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important integer underflow vulnerability exists in the X.Org X server\u0027s XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
        }
      ],
      "release_date": "2026-04-23T14:11:12.550000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T15:01:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11369"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34001",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-03-25T07:00:05.329048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This use-after-free vulnerability in the X.Org X server\u0027s XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34001",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001"
        }
      ],
      "release_date": "2026-04-23T14:14:42.224000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T15:01:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11369"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34003",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-03-25T07:19:13.949261+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important out-of-bounds memory access vulnerability exists in the X.Org X server\u0027s XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34003",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003"
        }
      ],
      "release_date": "2026-04-23T14:18:00.653000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T15:01:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11369"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debuginfo-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-debugsource-0:23.2.7-6.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xwayland-devel-0:23.2.7-6.el9_7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access"
    }
  ]
}

RHSA-2026:11388

Vulnerability from csaf_redhat - Published: 2026-04-28 18:07 - Updated: 2026-06-05 00:39

Summary

Red Hat Security Advisory: xorg-x11-server security update

Severity

Important

Notes

Topic: An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-33999

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 132 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34001

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 132 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34003

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 132 products

Product	Version	Remediation
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch	—	Vendor Fix fix Workaround

Threats

Impact Important

References

18 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:11388	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://www.cve.org/CVERecord?id=CVE-2026-33999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33999	external
https://access.redhat.com/security/cve/CVE-2026-34001	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://www.cve.org/CVERecord?id=CVE-2026-34001	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34001	external
https://access.redhat.com/security/cve/CVE-2026-34003	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://www.cve.org/CVERecord?id=CVE-2026-34003	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34003	external

Acknowledgments

TrendAI Zero Day Initiative Jan-Niklas Sohn

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:11388",
        "url": "https://access.redhat.com/errata/RHSA-2026:11388"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
      },
      {
        "category": "external",
        "summary": "2451109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
      },
      {
        "category": "external",
        "summary": "2451113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11388.json"
      }
    ],
    "title": "Red Hat Security Advisory: xorg-x11-server security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:39:28+00:00",
      "generator": {
        "date": "2026-06-05T00:39:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:11388",
      "initial_release_date": "2026-04-28T18:07:07+00:00",
      "revision_history": [
        {
          "date": "2026-04-28T18:07:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-28T18:07:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:39:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
                  "product_id": "CRB-9.7.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-0:1.20.11-33.el9_7.src",
                "product": {
                  "name": "xorg-x11-server-0:1.20.11-33.el9_7.src",
                  "product_id": "xorg-x11-server-0:1.20.11-33.el9_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server@1.20.11-33.el9_7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
                "product": {
                  "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
                  "product_id": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-33.el9_7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
                "product": {
                  "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
                  "product_id": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-33.el9_7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
                "product": {
                  "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
                  "product_id": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-33.el9_7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-common@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
                "product": {
                  "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
                  "product_id": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-33.el9_7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-devel@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debugsource@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xdmx-debuginfo@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xephyr-debuginfo@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xnest-debuginfo@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xorg-debuginfo@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xvfb-debuginfo@1.20.11-33.el9_7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
                "product": {
                  "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_id": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-debuginfo@1.20.11-33.el9_7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
                "product": {
                  "name": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
                  "product_id": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-source@1.20.11-33.el9_7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-0:1.20.11-33.el9_7.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src"
        },
        "product_reference": "xorg-x11-server-0:1.20.11-33.el9_7.src",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
        },
        "product_reference": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
        "relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-0:1.20.11-33.el9_7.src as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src"
        },
        "product_reference": "xorg-x11-server-0:1.20.11-33.el9_7.src",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64"
        },
        "product_reference": "xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
          "product_id": "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
        },
        "product_reference": "xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
        "relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-33999",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-03-25T06:29:19.544586+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important integer underflow vulnerability exists in the X.Org X server\u0027s XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
        }
      ],
      "release_date": "2026-04-23T14:11:12.550000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T18:07:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11388"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34001",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-03-25T07:00:05.329048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This use-after-free vulnerability in the X.Org X server\u0027s XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34001",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001"
        }
      ],
      "release_date": "2026-04-23T14:14:42.224000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T18:07:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11388"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34003",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-03-25T07:19:13.949261+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important out-of-bounds memory access vulnerability exists in the X.Org X server\u0027s XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
          "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
          "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34003",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003"
        }
      ],
      "release_date": "2026-04-23T14:18:00.653000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-28T18:07:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11388"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "AppStream-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-0:1.20.11-33.el9_7.src",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xdmx-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xephyr-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xnest-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xorg-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-Xvfb-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-common-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debuginfo-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-debugsource-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.aarch64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.i686",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.ppc64le",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.s390x",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-devel-0:1.20.11-33.el9_7.x86_64",
            "CRB-9.7.0.Z.MAIN:xorg-x11-server-source-0:1.20.11-33.el9_7.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access"
    }
  ]
}

RHSA-2026:11656

Vulnerability from csaf_redhat - Published: 2026-04-29 12:10 - Updated: 2026-06-05 00:39

Summary

Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Severity

Important

Notes

Topic: An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

CVE-2026-33999

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 13 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34001

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 13 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-34003

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 13 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

18 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:11656	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-33999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451106	external
https://www.cve.org/CVERecord?id=CVE-2026-33999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33999	external
https://access.redhat.com/security/cve/CVE-2026-34001	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451109	external
https://www.cve.org/CVERecord?id=CVE-2026-34001	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34001	external
https://access.redhat.com/security/cve/CVE-2026-34003	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451113	external
https://www.cve.org/CVERecord?id=CVE-2026-34003	external
https://nvd.nist.gov/vuln/detail/CVE-2026-34003	external

Acknowledgments

TrendAI Zero Day Initiative Jan-Niklas Sohn

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Xwayland is an X server for running X clients under Wayland.\n\nSecurity Fix(es):\n\n* xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)\n\n* xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)\n\n* xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:11656",
        "url": "https://access.redhat.com/errata/RHSA-2026:11656"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2451106",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
      },
      {
        "category": "external",
        "summary": "2451109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
      },
      {
        "category": "external",
        "summary": "2451113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11656.json"
      }
    ],
    "title": "Red Hat Security Advisory: xorg-x11-server-Xwayland security update",
    "tracking": {
      "current_release_date": "2026-06-05T00:39:07+00:00",
      "generator": {
        "date": "2026-06-05T00:39:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:11656",
      "initial_release_date": "2026-04-29T12:10:30+00:00",
      "revision_history": [
        {
          "date": "2026-04-29T12:10:30+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-29T12:10:30+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-05T00:39:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
                  "product_id": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@21.1.3-20.el8_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@21.1.3-20.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@21.1.3-20.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@21.1.3-20.el8_10?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@21.1.3-20.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@21.1.3-20.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@21.1.3-20.el8_10?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@21.1.3-20.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@21.1.3-20.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@21.1.3-20.el8_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
                  "product_id": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland@21.1.3-20.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debugsource@21.1.3-20.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
                "product": {
                  "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
                  "product_id": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xorg-x11-server-Xwayland-debuginfo@21.1.3-20.el8_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
        },
        "product_reference": "xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-33999",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-03-25T06:29:19.544586+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451106"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important integer underflow vulnerability exists in the X.Org X server\u0027s XKB compatibility map handling. This flaw allows an attacker with local or remote X11 server access to trigger a buffer read overrun, leading to memory-safety violations and potential denial of service. Red Hat Enterprise Linux systems utilizing the X.Org X server in graphical environments are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451106",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451106"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33999"
        }
      ],
      "release_date": "2026-04-23T14:11:12.550000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-29T12:10:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11656"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server. For remote access, disable X11 forwarding in SSH configurations if not required. Edit `/etc/ssh/sshd_config` and set `X11Forwarding no`. After modifying the configuration, restart the `sshd` service using `systemctl restart sshd`. Disabling X11 forwarding may impact remote graphical applications.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34001",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-03-25T07:00:05.329048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This use-after-free vulnerability in the X.Org X server\u0027s XSYNC fence triggering logic can lead to a server crash and potential memory corruption. Exploitation requires an attacker to have access to the X11 server, typically limited to local users or trusted remote connections. Systems not running the X.Org X server are not affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34001",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34001"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34001"
        }
      ],
      "release_date": "2026-04-23T14:14:42.224000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-29T12:10:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11656"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict access to the X11 server to trusted users and networks. If the X.Org X server is not required, consider disabling or uninstalling it. For environments where the X server is essential, running X applications within a sandboxed environment can help reduce the attack surface.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jan-Niklas Sohn"
          ],
          "organization": "TrendAI Zero Day Initiative"
        }
      ],
      "cve": "CVE-2026-34003",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-03-25T07:19:13.949261+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the X.Org X server\u0027s XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important out-of-bounds memory access vulnerability exists in the X.Org X server\u0027s XKB key types request validation. This flaw could lead to information exposure or a server crash and requires a specially crafted request to trigger. Systems running a graphical environment are potentially affected, with higher impact outcomes possible in certain configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34003",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34003"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34003"
        }
      ],
      "release_date": "2026-04-23T14:18:00.653000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-29T12:10:30+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:11656"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debuginfo-0:21.1.3-20.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:xorg-x11-server-Xwayland-debugsource-0:21.1.3-20.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-33999 (GCVE-0-2026-33999)

Tags

Sightings

Nomenclature