Red Hat Security AdvisoryRHSA-2026:49605
xorg-x11-server security update
Released 2026-08-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) xorg-x11-server-1.20.11-8.el8_6.1, xorg-x11-server-Xdmx-1.20.11-8.el8_6.1, xorg-x11-server-Xephyr-1.20.11-8.el8_6.1 +4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) xorg-x11-server-1.20.11-8.el8_6.1, xorg-x11-server-Xdmx-1.20.11-8.el8_6.1, xorg-x11-server-Xephyr-1.20.11-8.el8_6.1 +4
Fixes 1 record
Priority LOW 39
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2026-07-08 · Fixed in 21.1.24, 24.1.13 CWE-122
