Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat X11 Server Security Update for Linux

published 3 months ago

Summary

This security update addresses a potential vulnerability in the Red Hat X11 server, which is used to provide graphical user interfaces on Linux systems. If left unpatched, this vulnerability could allow an attacker to execute unauthorized code on a system. To protect your systems, apply the latest available update from Red Hat.

What to do

Update redhat xorg-x11-server to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xdmx to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xdmx-debuginfo to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xephyr to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xephyr-debuginfo to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xnest to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xnest-debuginfo to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xorg to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xorg-debuginfo to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xvfb to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-xvfb-debuginfo to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-common to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-debuginfo to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-debugsource to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-devel to version 0:1.20.11-34.el9_8.3.
Update redhat xorg-x11-server-source to version 0:1.20.11-34.el9_8.3.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xdmx	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xdmx-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xephyr	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xephyr-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xnest	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xnest-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xorg	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xorg-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xvfb	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-xvfb-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-common	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::appstream	redhat	xorg-x11-server-debugsource	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-xdmx-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-xephyr-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-xnest-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-xorg-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-xvfb-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-debuginfo	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-debugsource	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-devel	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3
Red Hat:enterprise_linux:9::crb	redhat	xorg-x11-server-source	< 0:1.20.11-34.el9_8.3 Fix: upgrade to 0:1.20.11-34.el9_8.3

Original advisory text

Red Hat Security Advisory: xorg-x11-server security update

References

https://access.redhat.com/errata/RHSA-2026:38486 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2496165 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38486.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-55999 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-55999 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55999 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published13 Jul 2026

Updated13 Jul 2026

First seen13 Jul 2026

Sources

RHSA-2026:38486 · OSV

Track software like this

Free during beta