Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

X Server Security Update for Red Hat Systems

published 3 months ago

Summary

A security update is available for the X server software on Red Hat systems. This update fixes a potential security issue that could allow an attacker to execute malicious code on a system. System administrators should apply this update to ensure the security of their X server software.

What to do

Update redhat xorg-x11-server to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xdmx to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xdmx-debuginfo to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xephyr to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xephyr-debuginfo to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xnest to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xnest-debuginfo to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xorg to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xorg-debuginfo to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xvfb to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-xvfb-debuginfo to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-common to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-debuginfo to version 0:1.20.11-8.el8_6.1.
Update redhat xorg-x11-server-debugsource to version 0:1.20.11-8.el8_6.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xdmx	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xdmx-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xephyr	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xephyr-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xnest	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xnest-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xorg	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xorg-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xvfb	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-xvfb-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-common	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_aus:8.6::appstream	redhat	xorg-x11-server-debugsource	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xdmx	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xdmx-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xephyr	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xephyr-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xnest	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xnest-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xorg	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xorg-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xvfb	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-xvfb-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-common	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-debuginfo	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1
Red Hat:rhel_eus_long_life:8.6::appstream	redhat	xorg-x11-server-debugsource	< 0:1.20.11-8.el8_6.1 Fix: upgrade to 0:1.20.11-8.el8_6.1

Original advisory text

Red Hat Security Advisory: xorg-x11-server security update

References

https://access.redhat.com/errata/RHSA-2026:49605 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2496165 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49605.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-55999 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-55999 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55999 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published4 Aug 2026

Updated12 Aug 2026

First seen12 Aug 2026

Sources

RHSA-2026:49605 · OSV

Track software like this

Free during beta