RLSA-2026:98500: Important: libXrender security update
Published Nov 13, 2026
·Updated
X.Org X11 libXrender runtime library
Security Fix(es):
libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
4 affected componentsFixes available
rocky-linux/libxrender<0:0.9.10-17.el9_9.1
0:0.9.10-17.el9_9.1
rocky-linux/libxrender-debuginfo<0:0.9.10-17.el9_9.1
0:0.9.10-17.el9_9.1
rocky-linux/libxrender-debugsource<0:0.9.10-17.el9_9.1
0:0.9.10-17.el9_9.1
rocky-linux/libxrender-devel<0:0.9.10-17.el9_9.1
0:0.9.10-17.el9_9.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/libXrenderto a version that resolves this vulnerability.Fixed in 0:0.9.10-17.el9_9.1 - Upgrade
Upgrade
rocky-linux/libXrender-debuginfoto a version that resolves this vulnerability.Fixed in 0:0.9.10-17.el9_9.1 - Upgrade
Upgrade
rocky-linux/libXrender-debugsourceto a version that resolves this vulnerability.Fixed in 0:0.9.10-17.el9_9.1 - Upgrade
Upgrade
rocky-linux/libXrender-develto a version that resolves this vulnerability.Fixed in 0:0.9.10-17.el9_9.1
Event History
Nov 13, 2026
Advisory Published
via OSV·12:04 PM
Data Sourced
via OSV·12:04 PM
DescriptionSeverityAffected Software