Red Hat Security AdvisoryRHSA-2026:38486
xorg-x11-server security update
Released 2026-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-34.el9_8.3, xorg-x11-server-Xdmx-1.20.11-34.el9_8.3, xorg-x11-server-Xephyr-1.20.11-34.el9_8.3 +4
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) xorg-x11-server-devel-1.20.11-34.el9_8.3, xorg-x11-server-source-1.20.11-34.el9_8.3
Fixes 1 record
Priority LOW 39
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2026-07-08 · Fixed in 21.1.24, 24.1.13 CWE-122
