Red Hat Security AdvisoryRHSA-2026:50100
xorg-x11-server-Xwayland security update
Released 2026-08-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) xorg-x11-server-Xwayland-24.1.5-6.el10_0.2
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) xorg-x11-server-Xwayland-devel-24.1.5-6.el10_0.2
Fixes 2 records
Priority MEDIUM 41
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentiall…
CVSS 4.0CRITICAL 9.0· Network · Low privileges · No interaction · EPSS 0.00308 · Published 2026-07-08 · Partial fix · 21.1.24, 24.1.13 CWE-416
Priority LOW 39
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2026-07-08 · Fixed in 21.1.24, 24.1.13 CWE-122
