<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: xfree86</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2014-8101: The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xser</title><link>https://patchthecve.com/cve/CVE-2014-8101.html</link><guid>https://patchthecve.com/cve/CVE-2014-8101.html</guid><pubDate>Wed, 17 Jun 2026 00:16:14 +0000</pubDate><description>MEDIUM 6.5: The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or ind</description></item><item><title>CVE-2014-8100: The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xse</title><link>https://patchthecve.com/cve/CVE-2014-8100.html</link><guid>https://patchthecve.com/cve/CVE-2014-8100.html</guid><pubDate>Wed, 17 Jun 2026 00:16:14 +0000</pubDate><description>MEDIUM 6.5: The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or in</description></item><item><title>CVE-2014-8099: The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xse</title><link>https://patchthecve.com/cve/CVE-2014-8099.html</link><guid>https://patchthecve.com/cve/CVE-2014-8099.html</guid><pubDate>Wed, 17 Jun 2026 00:16:14 +0000</pubDate><description>MEDIUM 6.5: The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or in</description></item><item><title>CVE-2014-8098: The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver </title><link>https://patchthecve.com/cve/CVE-2014-8098.html</link><guid>https://patchthecve.com/cve/CVE-2014-8098.html</guid><pubDate>Wed, 17 Jun 2026 00:16:14 +0000</pubDate><description>MEDIUM 6.5: The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index v</description></item><item><title>CVE-2014-8093: Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, </title><link>https://patchthecve.com/cve/CVE-2014-8093.html</link><guid>https://patchthecve.com/cve/CVE-2014-8093.html</guid><pubDate>Wed, 17 Jun 2026 00:16:13 +0000</pubDate><description>MEDIUM 6.5: Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to</description></item><item><title>CVE-2012-1699: The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFre</title><link>https://patchthecve.com/cve/CVE-2012-1699.html</link><guid>https://patchthecve.com/cve/CVE-2012-1699.html</guid><pubDate>Tue, 16 Jun 2026 23:40:07 +0000</pubDate><description>LOW 3.6: The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain pote</description></item></channel></rss>