<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: x.org</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-56000: Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and </title><link>https://patchthecve.com/cve/CVE-2026-56000.html</link><guid>https://patchthecve.com/cve/CVE-2026-56000.html</guid><pubDate>Thu, 09 Jul 2026 19:47:29 +0000</pubDate><description>HIGH 7.8: Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory.</description></item><item><title>CVE-2026-55999: Local attackers with a X connection able to provide PCX fonts to the X 
server xorg-server before 21.2.24 and </title><link>https://patchthecve.com/cve/CVE-2026-55999.html</link><guid>https://patchthecve.com/cve/CVE-2026-55999.html</guid><pubDate>Thu, 09 Jul 2026 19:49:51 +0000</pubDate><description>HIGH 8.5: Local attackers with a X connection able to provide PCX fonts to the X 
server xorg-server before 21.2.24 and xwayland before 24.1.13 could 
cause a heap buffer overflow via SetFont due to missing glyph boundary checks.</description></item><item><title>CVE-2026-34002: A flaw was found in the X.Org X server</title><link>https://patchthecve.com/cve/CVE-2026-34002.html</link><guid>https://patchthecve.com/cve/CVE-2026-34002.html</guid><pubDate>Mon, 26 Oct 2026 19:10:00 +0000</pubDate><description>MEDIUM 6.1: A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory bound</description></item><item><title>CVE-2026-34000: A flaw was found in the X.Org X server</title><link>https://patchthecve.com/cve/CVE-2026-34000.html</link><guid>https://patchthecve.com/cve/CVE-2026-34000.html</guid><pubDate>Mon, 26 Oct 2026 19:10:00 +0000</pubDate><description>MEDIUM 6.1: A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server</description></item></channel></rss>