[ALSA-2026:26709] Important: xorg-x11-server security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-06-18
Description:
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xserver] Backport other security fixes without a CVE assigned [almalinux-8.10.z] (JIRA:AlmaLinux-184289) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 xorg-x11-server-Xorg-1.20.11-28.el8_10.2.aarch64.rpm 1363f66e619f210dd3cdbfe409b2b8f6838ac9fd51d5369498d36db75f5364b9
aarch64 xorg-x11-server-Xvfb-1.20.11-28.el8_10.2.aarch64.rpm 2d46fd7d8a03091d478f11622f2e7fcec2291e1d9d330c9916def61b70db8bf3
aarch64 xorg-x11-server-Xnest-1.20.11-28.el8_10.2.aarch64.rpm 2ff3e4dc6ee1e25986c18a773a9abf22c0e8365c68dc736a09b6e08e2e57927a
aarch64 xorg-x11-server-Xephyr-1.20.11-28.el8_10.2.aarch64.rpm 5bfe268106a40f0f7e26864a05a305a6f3d623d23ea12bb51f5c5b7b53ad002d
aarch64 xorg-x11-server-devel-1.20.11-28.el8_10.2.aarch64.rpm 6ab695881dfd978db6a9d8d8ca03b8c9f566a805d3be08dcfd576fc84e659828
aarch64 xorg-x11-server-common-1.20.11-28.el8_10.2.aarch64.rpm 7d0f268259b8a64894031b3b400686c850ee2a92d96c649549a845fb74bf4872
aarch64 xorg-x11-server-Xdmx-1.20.11-28.el8_10.2.aarch64.rpm ab9e124c04d4f02833712ce0cb2ca2ec7647e5a7d83d92b6128618cdfac5fcca
i686 xorg-x11-server-devel-1.20.11-28.el8_10.2.i686.rpm 3af21b040b025f4b09c8344f6745d738432a95102918442f57922e670866a7c5
noarch xorg-x11-server-source-1.20.11-28.el8_10.2.noarch.rpm b2722317ecad1f22d0d28ba4aa3a1bd0ab14bbbe1ead8b442a2ff63e6da8755f
ppc64le xorg-x11-server-Xephyr-1.20.11-28.el8_10.2.ppc64le.rpm 01c39ecce0d94afe31161bcd57b4c70750805e6e80d2fc696fc8011a01ba3ac0
ppc64le xorg-x11-server-Xnest-1.20.11-28.el8_10.2.ppc64le.rpm 1e2088ef778f8cf16320080b82aeb30b88a6d77d5133ba4556b2fbb83f8c296f
ppc64le xorg-x11-server-common-1.20.11-28.el8_10.2.ppc64le.rpm 70196a6ef174ae3687e060d5aad2e516ce8baf7aed47203b6c8aa2f8a00c17f6
ppc64le xorg-x11-server-Xvfb-1.20.11-28.el8_10.2.ppc64le.rpm 7f010b43d1d495c24eef6e9981b23c0b98c73dfa77c67669b7649b52c8aeba3c
ppc64le xorg-x11-server-Xdmx-1.20.11-28.el8_10.2.ppc64le.rpm 89d65474638117022fd5760a690b391c9f957f927318ae80112a1ee9f3b8f3d4
ppc64le xorg-x11-server-Xorg-1.20.11-28.el8_10.2.ppc64le.rpm b6537aa095b43d4ac695f20159bef1aac37290802ca938d082727c58cc5619fa
ppc64le xorg-x11-server-devel-1.20.11-28.el8_10.2.ppc64le.rpm b991fdbc11f68f1a93c73c4f5fbc948746e7a3e67873d46fde3a56092adba0f8
s390x xorg-x11-server-Xdmx-1.20.11-28.el8_10.2.s390x.rpm 3ab6375980d4a8de068a18bdb89e8571e1bec86d3016965f24ad7bbc0d649175
s390x xorg-x11-server-common-1.20.11-28.el8_10.2.s390x.rpm 6c8768732b4ed8c869f2e24712470b1660f508ac997bd3e9ea5b50b5284db7d3
s390x xorg-x11-server-Xnest-1.20.11-28.el8_10.2.s390x.rpm 9198a5c8fc4e923335b866efc4ec86447fdf3426451a48084f9052f0df4e7d9f
s390x xorg-x11-server-Xvfb-1.20.11-28.el8_10.2.s390x.rpm b40df727cd9bdce5ff1ac24c6bf32a662c2653e5a3a975ad8c971651548f91ff
s390x xorg-x11-server-devel-1.20.11-28.el8_10.2.s390x.rpm baa0491a99581029eef8d0adc31968dc1e5a0d63271ec984266fb8e5e80e0794
s390x xorg-x11-server-Xephyr-1.20.11-28.el8_10.2.s390x.rpm c55804599c967d4b7ccedefcc1a566698c4e605508e4eac5634e8452459542ac
s390x xorg-x11-server-Xorg-1.20.11-28.el8_10.2.s390x.rpm f992a11925756956575854e604acae7e7061a4adc37ef13881c510130989b5f1
x86_64 xorg-x11-server-Xnest-1.20.11-28.el8_10.2.x86_64.rpm 0ac60fa84f5c007ede9f3e82d74e6144b304d720dfebdf42231000016e330fc2
x86_64 xorg-x11-server-Xorg-1.20.11-28.el8_10.2.x86_64.rpm 1f40a8f214770dfd1bb58984c6703ad9ebef18dae602e8e4bf59692b8204470c
x86_64 xorg-x11-server-Xvfb-1.20.11-28.el8_10.2.x86_64.rpm 215a2e138f53460801b3e619cd10157d5f7268f6a2e34b3819d6d3c1c3378bac
x86_64 xorg-x11-server-Xdmx-1.20.11-28.el8_10.2.x86_64.rpm 3f78a09731069ffaf592cf6ddc84aed8c9219a38a3be6b7474ca820579393478
x86_64 xorg-x11-server-common-1.20.11-28.el8_10.2.x86_64.rpm 50a9cc4a29c7d95716988399a5009afce64f85729282816b7472eac15fe2171e
x86_64 xorg-x11-server-Xephyr-1.20.11-28.el8_10.2.x86_64.rpm 6035d6fbfbcfcab801e2d6d1448282090e6a6516c980e15584984e51d72b3fa0
x86_64 xorg-x11-server-devel-1.20.11-28.el8_10.2.x86_64.rpm f83e19f7af7b72c2b8ff6f1aeeb38b167ed86f0664a3c95a989ade32f15e44c5
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.