RHSA-2026:50100: Important: xorg-x11-server-Xwayland security update
Published Aug 4, 2026
·Updated
Important: xorg-x11-server-Xwayland security update
Other sources
Xwayland is an X server for running X clients under Wayland.Security Fix(es): xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
12 affected components
Red Hat Red Hat Enterprise Linux for Power, little endian - 4 years of support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
xorg-x11-serverto a version that resolves this vulnerability.Patch CVE-2026-56000 - Upgrade
Upgrade
xorg-x11-server-Xwaylandto a version that resolves this vulnerability.Patch CVE-2026-55999
Event History
Aug 4, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·02:22 PM
Data Sourced
via Red Hat·02:22 PM
Severity