RHSA-2026:49516: Important: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.Security Fix(es): xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/xorg-x11-serverto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1 - Upgrade
Upgrade
redhat/xorg-x11-server-commonto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1 - Upgrade
Upgrade
redhat/xorg-x11-server-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1 - Upgrade
Upgrade
redhat/xorg-x11-server-debugsourceto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1 - Upgrade
Upgrade
redhat/xorg-x11-server-commonto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1.aa - Upgrade
Upgrade
redhat/xorg-x11-server-debuginfoto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1.aa - Upgrade
Upgrade
redhat/xorg-x11-server-debugsourceto a version that resolves this vulnerability.Fixed in 1.20.11-29.el9_4.1.aa - Compensating control
Apply the security update for xorg-x11-server (X.Org X11 xserver) that fixes the glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999). Use Red Hat article https://access.redhat.com/articles/11258 for application details.
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49516?
The severity of RHSA-2026:49516 is classified as Important.
What vulnerability is addressed in RHSA-2026:49516?
RHSA-2026:49516 addresses a buffer overflow vulnerability identified as CVE-2026-55999 in the X.Org server.
How do I fix RHSA-2026:49516?
To fix RHSA-2026:49516, you should update the xorg-x11-server packages to the latest version available from your Red Hat repository.
What software is affected by RHSA-2026:49516?
The affected software for RHSA-2026:49516 includes the xorg-x11-server-common, xorg-x11-server-debuginfo, and xorg-x11-server packages.
What is the risk associated with the vulnerability in RHSA-2026:49516?
The risk associated with the buffer overflow vulnerability in RHSA-2026:49516 could potentially allow an attacker to execute arbitrary code.