Red Hat Security Advisory

RHSA-2026:21716

xorg-x11-server-Xwayland security update

Released 2026-05-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.6
Red Hat Enterprise Linux AppStream E4S (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.6
Red Hat Enterprise Linux AppStream TUS (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.6

TI-2026-26341 CVE-2026-34002 · GHSA-2q6x-pg74-2276

MEDIUM 40

A flaw was found in the X.Org X server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00489 Published 2026-05-05 Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +22 CWE-805

TI-2026-26339 CVE-2026-34000 · GHSA-x7p4-8jjf-qcp4

MEDIUM 40

A flaw was found in the X.Org X server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00489 Published 2026-05-05 Partial fix · 24.1.5-6.el10_0, 1.1.0-25.el6_10.16 +23 CWE-125

TI-2026-26342 CVE-2026-34003 · GHSA-5mqr-3465-c7p6

LOW 36

A flaw was found in the X.Org X server's XKB key types request validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0025 Published 2026-04-23 Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-125

TI-2026-26340 CVE-2026-34001 · GHSA-cjgm-66pw-5r9r

LOW 36

A flaw was found in the X.Org X server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00264 Published 2026-04-23 Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-825

TI-2026-26338 CVE-2026-33999 · GHSA-g562-3mh5-27v6

LOW 36

A flaw was found in the X.Org X server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0038 Published 2026-04-23 Partial fix · 24.1.5-6.el10_1, 24.1.9-4.el10_2 +33 CWE-191