[ALSA-2026:26610] Important: xorg-x11-server security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-07-02
Description:
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch (CVE-2026-50256) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence() (CVE-2026-50257) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels (CVE-2026-50258) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing (CVE-2026-50259) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter() (CVE-2026-50260) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter() (CVE-2026-50261) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes (CVE-2026-50262) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow() (CVE-2026-50263) * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264) Bug Fix(es) and Enhancement(s): * [xserver] Backport other security fixes without a CVE assigned [almalinux-9.8.z] (JIRA:AlmaLinux-184288) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 xorg-x11-server-Xvfb-1.20.11-34.el9_8.2.aarch64.rpm 07c2a283a318b6c7864f155f77d9592dbdcb5be2899fb8c328743e316555dcd9
aarch64 xorg-x11-server-Xnest-1.20.11-34.el9_8.2.aarch64.rpm 2bfdc9bb8b106eeb88a9991921bbfc9f9d2efd9384a96dd580b4d701beb311ea
aarch64 xorg-x11-server-Xephyr-1.20.11-34.el9_8.2.aarch64.rpm 2ea39258d7ce7c4c56c7137b3ec025ba474e117a4c6c7f34a971080af116915c
aarch64 xorg-x11-server-Xorg-1.20.11-34.el9_8.2.aarch64.rpm 609751fda48ed072dd3820550bfd7812fa9c363f2ceec2d45368111e837a5b40
aarch64 xorg-x11-server-common-1.20.11-34.el9_8.2.aarch64.rpm 8d4476deedab4f597e52f099f5c9f6437413ef57ab53967495e2cbe779dbf20d
aarch64 xorg-x11-server-Xdmx-1.20.11-34.el9_8.2.aarch64.rpm ac834ebbed7fb165ca4c988c6dade394a201e2666624c96eda2291b81eabd06f
aarch64 xorg-x11-server-devel-1.20.11-34.el9_8.2.aarch64.rpm e3533540893fa1314d23402ce3697f36aab1d7a092dd3bf5325a10b0a6aedf91
i686 xorg-x11-server-devel-1.20.11-34.el9_8.2.i686.rpm bece6ba4322539969094bb61e584ef5e6a6c95cffeaaff2f056f0f4540e7f9f9
noarch xorg-x11-server-source-1.20.11-34.el9_8.2.noarch.rpm fe8d7b998faa3cd785e1f21616963da47934a541405c9daba0277692995ea4cd
ppc64le xorg-x11-server-Xdmx-1.20.11-34.el9_8.2.ppc64le.rpm 0f3c6b5a51e97d406216a8659c384752eae9915835d3478adea7feacae9c3e88
ppc64le xorg-x11-server-Xvfb-1.20.11-34.el9_8.2.ppc64le.rpm 35a4097cd6192d8431a51f2929be476691bf41ac5646bb179d1bdfb4213b0a80
ppc64le xorg-x11-server-common-1.20.11-34.el9_8.2.ppc64le.rpm 8c26bff6652a6ff02906934bc215d7cbab9bb71d5d0202361a2bd828e3ed4cb5
ppc64le xorg-x11-server-Xephyr-1.20.11-34.el9_8.2.ppc64le.rpm 8c47d224783582295625bb4c23330e31b529c14180739dc589004bfccc65b87b
ppc64le xorg-x11-server-Xorg-1.20.11-34.el9_8.2.ppc64le.rpm 91ddd199abadb962faa03bda5ff4e1c4b443c1017414ebe01004e441e1799978
ppc64le xorg-x11-server-Xnest-1.20.11-34.el9_8.2.ppc64le.rpm e628a213c3f74f6ab3fc4013d04c4e25258943bf58f628d6a36f9d1e05464fea
ppc64le xorg-x11-server-devel-1.20.11-34.el9_8.2.ppc64le.rpm fb6ac207a91f2fe0b5bb0a1ec78aa0a145d19119daf6d86920fe1cc6f7cdb8e6
s390x xorg-x11-server-Xorg-1.20.11-34.el9_8.2.s390x.rpm 41e9f2bb0630d0c6c47e35a3a7e01428d705299ba7fb0f974ec4f9b6cd1b1b61
s390x xorg-x11-server-Xvfb-1.20.11-34.el9_8.2.s390x.rpm 53a4fdd831285a0a8679a444798cc935e0aac35bc66180eb69c3f32b464dbb46
s390x xorg-x11-server-Xephyr-1.20.11-34.el9_8.2.s390x.rpm 5dbec8ea0d7e2c26586347baac73654b6c3181c67c9ef3d4ba792c02f8f04f7c
s390x xorg-x11-server-Xdmx-1.20.11-34.el9_8.2.s390x.rpm 727d31e628284a7078a1f8eaaf803046ad9a4298ef125987c9504d673b413015
s390x xorg-x11-server-common-1.20.11-34.el9_8.2.s390x.rpm 803c92ca264195de1ca9a2887615db6ec99b0e1a83c8c7a0b217802b25c7c548
s390x xorg-x11-server-devel-1.20.11-34.el9_8.2.s390x.rpm c1f4f3f401c0b6e12693a10a06805a45afff7051c56630da9e1ccac3d9469761
s390x xorg-x11-server-Xnest-1.20.11-34.el9_8.2.s390x.rpm e71fffc6961959332a69199813f08895ea5c7b10c91b76ebfb0092c5e4b20e56
x86_64 xorg-x11-server-Xorg-1.20.11-34.el9_8.2.x86_64.rpm 2e8615f98e240a1150591a787615775e30b5c0fdd5acb0d810a32fd70ce99b0f
x86_64 xorg-x11-server-Xvfb-1.20.11-34.el9_8.2.x86_64.rpm 6fb216923b06c3130bc41ba45df8aca2b0f01a3190a59d288b54dbe2ddbe6f8c
x86_64 xorg-x11-server-common-1.20.11-34.el9_8.2.x86_64.rpm 834c59fc347d776908ba88e2c17125261f2a11c28d06652538f730992c1294a0
x86_64 xorg-x11-server-Xdmx-1.20.11-34.el9_8.2.x86_64.rpm a7386fc0ddf97ad5bb2c9ec67e78c26ff035834fbaa9898da3327dbfb589d5f7
x86_64 xorg-x11-server-Xnest-1.20.11-34.el9_8.2.x86_64.rpm bc8c83acdfe0f8041d9ff488f7404dc54f7b56deda949f45bca8a06d963a77e9
x86_64 xorg-x11-server-devel-1.20.11-34.el9_8.2.x86_64.rpm f4b1e70a91e07e6165dc3868a0e8f838fa73b83937a6df503a6dfaf22a252486
x86_64 xorg-x11-server-Xephyr-1.20.11-34.el9_8.2.x86_64.rpm fd14724f42b702132cfa95bb2682550dbddaa310afc091a4aa97cccf9bbdd1f7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.