ALSA-2026:91003: Important: libXrender security update
Published Oct 27, 2026
·Updated
X.Org X11 libXrender runtime library
Security Fix(es):
libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
2 affected componentsFixes available
almalinux/libxrender<0.9.11-8.el10_2.1
0.9.11-8.el10_2.1
almalinux/libxrender-devel<0.9.11-8.el10_2.1
0.9.11-8.el10_2.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/libXrenderto a version that resolves this vulnerability.Fixed in 0.9.11-8.el10_2.1 - Upgrade
Upgrade
almalinux/libXrender-develto a version that resolves this vulnerability.Fixed in 0.9.11-8.el10_2.1
Event History
Oct 27, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software