Red Hat Product Errata RHSA-2026:38490 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38490 - Security Advisory Overview Updated Packages Synopsis Important: xorg-x11-server-Xwayland security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Xwayland is an X server for running X clients under Wayland. Security Fix(es): xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2496165 - CVE-2026-55999 xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow BZ - 2496193 - CVE-2026-56000 X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() CVEs CVE-2026-55999 CVE-2026-56000 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d x86_64 xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 7ecb1580d40dbdb4773850e15639e9ac8ea25b726c4c29e295c9fcfadfb6b1fe xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 6401dd921c167670b73933c2814df7883f6e6c8970dd28b68edbeb53b5629453 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: d49d2450bc5f7077984bf909550e01980c8d477b44d1eb8d5323be9cbd73cf0b Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d x86_64 xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 7ecb1580d40dbdb4773850e15639e9ac8ea25b726c4c29e295c9fcfadfb6b1fe xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 6401dd921c167670b73933c2814df7883f6e6c8970dd28b68edbeb53b5629453 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: d49d2450bc5f7077984bf909550e01980c8d477b44d1eb8d5323be9cbd73cf0b Red Hat Enterprise Linux for IBM z Systems 9 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d s390x xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.s390x.rpm SHA-256: fc78910fd0304939ac4b3228b770e881f11d1b344d2d490bee2287dc12b6dc86 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.s390x.rpm SHA-256: 1135096fe2341caf424f16a9276c3190722f0e96453490cac693273894a638a5 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.s390x.rpm SHA-256: 111ffcc5ed2a2efa453c1d3114e2433fef899af73995577e3308837838771c9e Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d s390x xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.s390x.rpm SHA-256: fc78910fd0304939ac4b3228b770e881f11d1b344d2d490bee2287dc12b6dc86 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.s390x.rpm SHA-256: 1135096fe2341caf424f16a9276c3190722f0e96453490cac693273894a638a5 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.s390x.rpm SHA-256: 111ffcc5ed2a2efa453c1d3114e2433fef899af73995577e3308837838771c9e Red Hat Enterprise Linux for Power, little endian 9 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d ppc64le xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: 7082aa8c88ccfd5210aa50b5c0ea1bb8769fe931ffa0fcc9dc315a1b74d27cb3 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: ffe2c562791b9098e7a5b12a39651fc5dfcd9328478a6de923587e91d0e8f09f xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: bc0dbef9cdb8a923275ca033eee148c0970a5f14d193ac31e18d96b719eb2425 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d ppc64le xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: 7082aa8c88ccfd5210aa50b5c0ea1bb8769fe931ffa0fcc9dc315a1b74d27cb3 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: ffe2c562791b9098e7a5b12a39651fc5dfcd9328478a6de923587e91d0e8f09f xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: bc0dbef9cdb8a923275ca033eee148c0970a5f14d193ac31e18d96b719eb2425 Red Hat Enterprise Linux for ARM 64 9 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d aarch64 xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.aarch64.rpm SHA-256: c498c2c4d084d175396efde6e1fe333b684378862722ef5966120b0e7d6379a5 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.aarch64.rpm SHA-256: 6849f5746d2c18443b51153a0f3ac157b2eada3220b5e9d077f10d1154f09e69 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.aarch64.rpm SHA-256: 20b8c55d75a493602fbbf16b9185d6955149f7d251dbe786a761c4011be16be2 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d aarch64 xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.aarch64.rpm SHA-256: c498c2c4d084d175396efde6e1fe333b684378862722ef5966120b0e7d6379a5 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.aarch64.rpm SHA-256: 6849f5746d2c18443b51153a0f3ac157b2eada3220b5e9d077f10d1154f09e69 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.aarch64.rpm SHA-256: 20b8c55d75a493602fbbf16b9185d6955149f7d251dbe786a761c4011be16be2 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d ppc64le xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: 7082aa8c88ccfd5210aa50b5c0ea1bb8769fe931ffa0fcc9dc315a1b74d27cb3 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: ffe2c562791b9098e7a5b12a39651fc5dfcd9328478a6de923587e91d0e8f09f xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.ppc64le.rpm SHA-256: bc0dbef9cdb8a923275ca033eee148c0970a5f14d193ac31e18d96b719eb2425 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.src.rpm SHA-256: 489b10406d4fd5ca8cb7a05dab043ffe989460312e5607eecf10e613bef66f0d x86_64 xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 7ecb1580d40dbdb4773850e15639e9ac8ea25b726c4c29e295c9fcfadfb6b1fe xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 6401dd921c167670b73933c2814df7883f6e6c8970dd28b68edbeb53b5629453 xorg-x11-server-Xwayland-debugsource-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: d49d2450bc5f7077984bf909550e01980c8d477b44d1eb8d5323be9cbd73cf0b Red Hat CodeReady Linux Builder for x86_64 9 SRPM x86_64 xorg-x11-server-Xwayland-24.1.9-4.el9_8.3.i686.rpm SHA-256: 897c90bb90240d4df82133be999d525c1d55696279ad7d275b46b67c7971d6b4 xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.i686.rpm SHA-256: 81059331915953c456fb234ac9340e73e8113e570d66bef38848d03e358bc95e xorg-x11-server-Xwayland-debuginfo-24.1.9-4.el9_8.3.x86_64.rpm SHA-256: 6401dd921c167670b73933c2814df7883f6e6c8970dd28b68edbeb53b5629453 xorg-x11-server-Xwa