Red Hat Product Errata RHSA-2026:11692 - Security Advisory Issued: 2026-04-29 Updated: 2026-04-29 RHSA-2026:11692 - Security Advisory Overview Updated Packages Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999) xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001) xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2451106 - CVE-2026-33999 xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling BZ - 2451109 - CVE-2026-34001 xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption BZ - 2451113 - CVE-2026-34003 xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access CVEs CVE-2026-33999 CVE-2026-34001 CVE-2026-34003 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM xorg-x11-server-1.20.11-28.el8_10.src.rpm SHA-256: 4967b4aea0e233467caa28ff04d20254ca275bf2c7c0cde1fd56794e20314c68 x86_64 xorg-x11-server-Xdmx-1.20.11-28.el8_10.x86_64.rpm SHA-256: da16aa52dff0bed854fc2239263cdd414a57848230d03248107a26ad6425a4ba xorg-x11-server-Xdmx-debuginfo-1.20.11-28.el8_10.x86_64.rpm SHA-256: 1e2dc96ed0324d06a1f2e6d812e88617c83f859ea03db92b5787f0e7e195cf6b xorg-x11-server-Xephyr-1.20.11-28.el8_10.x86_64.rpm SHA-256: 858d7bfa278de6cca0cdbb82e36387861d5d1ee6402bcbd71a6ecb15dea6baeb xorg-x11-server-Xephyr-debuginfo-1.20.11-28.el8_10.x86_64.rpm SHA-256: 8ed03afb6574bccb6d69faa9876128ee28dd1633c491b0529128967959636fb8 xorg-x11-server-Xnest-1.20.11-28.el8_10.x86_64.rpm SHA-256: 61ad393a422aef175873da7e523b759659c598bd86eb40a03871a82ca63e7bcf xorg-x11-server-Xnest-debuginfo-1.20.11-28.el8_10.x86_64.rpm SHA-256: 617f91442480716b3acdafed4f87bb8b3ea1688de28c31727313f0a82808ad64 xorg-x11-server-Xorg-1.20.11-28.el8_10.x86_64.rpm SHA-256: 3138cd5d64fa251bd720df871925f775fb90b9f129fd857c1062c58f1c4797cb xorg-x11-server-Xorg-debuginfo-1.20.11-28.el8_10.x86_64.rpm SHA-256: 7e4c058219ad1b116816d61af5aad7a0dd0420c9e0e579ee079dd448784df399 xorg-x11-server-Xvfb-1.20.11-28.el8_10.x86_64.rpm SHA-256: b0b7b01883fc23de62fb882aa56dc61a0a50cc3041963e233c25765298bb3d27 xorg-x11-server-Xvfb-debuginfo-1.20.11-28.el8_10.x86_64.rpm SHA-256: 9f6d7864e7535e3821b797b31af2952dedd254958c71a7afc38c79d001702c1b xorg-x11-server-common-1.20.11-28.el8_10.x86_64.rpm SHA-256: 563373a539c9f145d1ecf376ebba7e5beff9afc444c5c77b59d59ef052bfc4a3 xorg-x11-server-debuginfo-1.20.11-28.el8_10.x86_64.rpm SHA-256: 47f9e8190228338a25910fd6fb6bcd2d9cb6b2aa11e74f0481b7d3b3084bcc4b xorg-x11-server-debugsource-1.20.11-28.el8_10.x86_64.rpm SHA-256: acf99c2bcf1e72dc3c02e289337bdc1355bbad1f0ab82ccd0bb0f13ec034f93d Red Hat Enterprise Linux for IBM z Systems 8 SRPM xorg-x11-server-1.20.11-28.el8_10.src.rpm SHA-256: 4967b4aea0e233467caa28ff04d20254ca275bf2c7c0cde1fd56794e20314c68 s390x xorg-x11-server-Xdmx-1.20.11-28.el8_10.s390x.rpm SHA-256: 15bc1bf413e3666bf8447ffc33c605eb74cf87d8604811f4b5efb8902d962998 xorg-x11-server-Xdmx-debuginfo-1.20.11-28.el8_10.s390x.rpm SHA-256: 3aae725e56c883bece66f6abee11f397dc0d22ac948a7ecdec9b42d9da450cba xorg-x11-server-Xephyr-1.20.11-28.el8_10.s390x.rpm SHA-256: c4951341e61328f4b17f694fd9ba1255366e5061939870e9851a065b88b878a8 xorg-x11-server-Xephyr-debuginfo-1.20.11-28.el8_10.s390x.rpm SHA-256: 643e8deab0de3507f2d70a3f224637ded41786d698d5fccf825730072f7d74eb xorg-x11-server-Xnest-1.20.11-28.el8_10.s390x.rpm SHA-256: f2908ca6a9d3773e6bf08a150d4e56b47715c95044d363e5f04672e3746df553 xorg-x11-server-Xnest-debuginfo-1.20.11-28.el8_10.s390x.rpm SHA-256: f6b7b7d89bcde435c84c1bb8eade81a7860b877af48b2bbfdc875cd7bf4a2ace xorg-x11-server-Xorg-1.20.11-28.el8_10.s390x.rpm SHA-256: 7c5755baa215536b508486d1d3578afce272caa34c713fa246b7672a249b6cc1 xorg-x11-server-Xorg-debuginfo-1.20.11-28.el8_10.s390x.rpm SHA-256: 67459908bc9095cb5ffc8e1c02d268833022bda77cd60408dc53e5a190a667d6 xorg-x11-server-Xvfb-1.20.11-28.el8_10.s390x.rpm SHA-256: 71ea41f5795f87741a1e44172cf704baa695c4ad0e4f8c60c34a12a1eaf2bd08 xorg-x11-server-Xvfb-debuginfo-1.20.11-28.el8_10.s390x.rpm SHA-256: effebd6f256171266033a7b59bad305261a98309df7df2e6284527a5097aa3d3 xorg-x11-server-common-1.20.11-28.el8_10.s390x.rpm SHA-256: 8b7b937407e23a41dc65b35906be3ac6a8828241d7248722d9e429483e255a98 xorg-x11-server-debuginfo-1.20.11-28.el8_10.s390x.rpm SHA-256: b7debf53e5b7c8e4c73d84233f65bddc0fe60dd98830edb60d88b09edeaca631 xorg-x11-server-debugsource-1.20.11-28.el8_10.s390x.rpm SHA-256: 9904025ba34427a8da8f9b23555b6116cce10aee8b4bfa155828481b7c06d50e Red Hat Enterprise Linux for Power, little endian 8 SRPM xorg-x11-server-1.20.11-28.el8_10.src.rpm SHA-256: 4967b4aea0e233467caa28ff04d20254ca275bf2c7c0cde1fd56794e20314c68 ppc64le xorg-x11-server-Xdmx-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 8ad85e2bac0543b191ba9964350c2b31edeecd5ba172047b200a0c1f8fa53de5 xorg-x11-server-Xdmx-debuginfo-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 0b400a4cbfd07345b7a0ff6271c116b3af4e29bd040583b8ee23626dacd43641 xorg-x11-server-Xephyr-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 7ec685c114d220527e7ef42c244319b0e1158b68af5f67cfaa357c51368be839 xorg-x11-server-Xephyr-debuginfo-1.20.11-28.el8_10.ppc64le.rpm SHA-256: bc7ff1ddeb504d138ebe9f2713c7c2dec6e98428b3d210c5aaf98dee7bb91fca xorg-x11-server-Xnest-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 737b4b85a9c02f3bc519c40a9a13a5fd80597863a3820a39274e28413d9249d9 xorg-x11-server-Xnest-debuginfo-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 3b0d19041dabe96e6c5b05d75a9725dbc5e258c81f57dd8a9b66d8a3d2a8bf6d xorg-x11-server-Xorg-1.20.11-28.el8_10.ppc64le.rpm SHA-256: df41510f97939b15b49b06ce25b623c1bc2766a87534cfd38f596f5542c1bfd6 xorg-x11-server-Xorg-debuginfo-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 0b40bc3c736c4df3906012725edd1991d95589a1b614c0bcf7c4a8e133574549 xorg-x11-server-Xvfb-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 827dfc96d7d4c475d01261f3cc4e8e8df4cf5c4db00ff6cd1b7a8c9a42001207 xorg-x11-server-Xvfb-debuginfo-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 419a991c4ca54a1715dea785a168a05328fe0679d9a71ff46fbd2288d3f72ca2 xorg-x11-server-common-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 58c7e14ed6af5844b9464be85df05d70e6818392fb4998e28fe985ae3d582a48 xorg-x11-server-debuginfo-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 0331198155cbf1868e64485751f4510d39fd6ff1c6a09758b7a6ede12d9fef54 xorg-x11-server-debugsource-1.20.11-28.el8_10.ppc64le.rpm SHA-256: 1076431372c1bb13a9637d7797ac509f5167be978b7bc7e2b658e05bd61cd56b Red Hat Enterprise Linux for ARM 64 8 SRPM xorg-x11-server-1.20.11-28.el8_10.src.rpm SHA-256: 4967b4aea0e233467caa28ff04d20254ca275bf2c7c0cde1fd56794e20314c68 aarch64 xorg-x11-server-Xdmx-1.20.11-28.el8_10.aarch64.rpm SHA-256: 5da3855702667e9719d700bf24f09af78cc762a41a8d362ee61e994f5275650e xorg-x11-server-Xdmx-debuginfo-1.20.11-28.el8_10.aarch64.rpm SHA-256: 79efcbd248081de39798b52b7c673d449c1e828d7cf6496511f8091f47b04ddf xorg-x11-server-Xephyr-1.20.11-28.el8_10.aarch64.rpm SHA-256: 53b0c597d0d7783af04f73c08e9b9a3f046600e08106b655a41ae3d2f9de7e34 xorg-x11-server-Xephyr-debuginfo-1.20.11-28.el8_10.aarch64.rpm SHA-256: f92dfe3cfb682d4aef8e9d935c11878d1f70dd38ff32f5040c42e76f90bbf5d1 xorg-x11-server-Xnest-1.20.11-28.el8_10.aarch64.rpm SHA-256: d7be296bbb427bd2674565fe1072b81c65321009f5ffad33eee9ecd577fe7400 xorg-x11-server-Xnest-debuginfo-1.20.11-28.el8_10.aarch64.rpm SHA-256: 268dac0a1894b42430cf7535e1b069313a8eae16f7a2526317c592e15544d62d xorg-x11-server-Xorg-1.20.11-28.el8_10.aarch64.rpm SHA-256: e9ee4381122f6de758307eb4896ec19ff6588d0251428d4bbd08462286f096f3 xorg-x11-server-Xorg-debuginfo-1.20.11-28.el8_10.aarch64.rpm SHA-256: d25c5648b99f0e572f62617cbda9ae8a17035600563a319204bc4dc892dc66ed xorg-x11-server-Xvfb-1.20.11-28.el8_10.aarch64.rpm SHA-256: 0e458ad3f2265e901a94dfcc367f1c6e501830db2ff308e747d760c79c3f2b17 xorg-x11-server-Xvfb-debuginfo-1.20.11-