Red Hat Security Advisory

RHSA-2026:20590

xorg-x11-server security update

Released 2026-05-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) xorg-x11-server-1.20.4-34.el7_9, xorg-x11-server-Xephyr-1.20.4-34.el7_9, xorg-x11-server-Xorg-1.20.4-34.el7_9 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) xorg-x11-server-Xdmx-1.20.4-34.el7_9, xorg-x11-server-Xnest-1.20.4-34.el7_9, xorg-x11-server-Xvfb-1.20.4-34.el7_9 +4

TI-2026-26341 CVE-2026-34002 · GHSA-2q6x-pg74-2276

MEDIUM 40

A flaw was found in the X.Org X server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00489 Published 2026-05-05 Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +22 CWE-805

TI-2026-26339 CVE-2026-34000 · GHSA-x7p4-8jjf-qcp4

MEDIUM 40

A flaw was found in the X.Org X server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00489 Published 2026-05-05 Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +23 CWE-125

TI-2026-26342 CVE-2026-34003 · GHSA-5mqr-3465-c7p6

LOW 36

A flaw was found in the X.Org X server's XKB key types request validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2026-04-23 Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-125

TI-2026-26340 CVE-2026-34001 · GHSA-cjgm-66pw-5r9r

LOW 36

A flaw was found in the X.Org X server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00264 Published 2026-04-23 Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-825

TI-2026-26338 CVE-2026-33999 · GHSA-g562-3mh5-27v6

LOW 36

A flaw was found in the X.Org X server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0038 Published 2026-04-23 Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-191