- What: Security update for Xorg-X11-Server-Xwayland
- Impact: Systems using Xwayland may be vulnerable to heap buffer overflow
Red Hat Product Errata RHSA-2026:50100 - Security Advisory Issued: 2026-08-04 Updated: 2026-08-04 RHSA-2026:50100 - Security Advisory Overview Updated Packages Synopsis Important: xorg-x11-server-Xwayland security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Xwayland is an X server for running X clients under Wayland. Security Fix(es): xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999) X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2496165 - CVE-2026-55999 xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow BZ - 2496193 - CVE-2026-56000 X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() CVEs CVE-2026-55999 CVE-2026-56000 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba x86_64 xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: c9935e4842ce87df5df420145e05eaf5e4b453c95bb907d5eac20c8fb1c1c137 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: 380797dcecdd392b9d8d8da6127d32b95d2cf46ec363acc9cd6b6c33b8011933 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: 1343b6cd681d95ee44e779c1c41af858cfbec2b7129415a9ddcfd9395f72ddf4 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba s390x xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.s390x.rpm SHA-256: 7cb4e63348653ebe3b1b5d30ef95691db2a5cce5640038ff8a2d25a4fee8d003 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.s390x.rpm SHA-256: c5eab42c9860fd4fcec1e276611f81d7cb21bad25b0acf3c0ac2c577eb1e9f22 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.s390x.rpm SHA-256: 09dbff65a7872e856914e5bc6ca593c8f3942be9cf2a63747f4fe4ecd4ce862f Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba ppc64le xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: 253dc289aae81fd10e8003fc595e559c6e77ca9d824eabe5820be9842c5ac98a xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: 37e9d465f8bbe19c1d3e93cb44eb036a0233bf269f0333161a81c7ccbb6dd821 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: f2deadace17e0553d75310b8284cdf75f577941fa2b85e063ecea088b4ae64ed Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba aarch64 xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: 98673b65711eff13ad5871472044dbf97bc78cecba0dedf26ad5d9ae3a431df2 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: e6fd08456f75971ba4904b032e3792878e036c0c750cf4e12a25a5464f33d278 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: 059ad3b9ec2a26967aa3681d93fdf0e1c617f93a8ee53ba734bff487fbb0630e Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: 380797dcecdd392b9d8d8da6127d32b95d2cf46ec363acc9cd6b6c33b8011933 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: 1343b6cd681d95ee44e779c1c41af858cfbec2b7129415a9ddcfd9395f72ddf4 xorg-x11-server-Xwayland-devel-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: de01adb143c54d704097d2cd8bea5ea60326218782dc5768d58499aabe10f6e2 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: 37e9d465f8bbe19c1d3e93cb44eb036a0233bf269f0333161a81c7ccbb6dd821 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: f2deadace17e0553d75310b8284cdf75f577941fa2b85e063ecea088b4ae64ed xorg-x11-server-Xwayland-devel-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: 5f4b612e9fc07bcd737040127d2177a28c7b6c8dd66136dec762503827548f65 Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 SRPM s390x xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.s390x.rpm SHA-256: c5eab42c9860fd4fcec1e276611f81d7cb21bad25b0acf3c0ac2c577eb1e9f22 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.s390x.rpm SHA-256: 09dbff65a7872e856914e5bc6ca593c8f3942be9cf2a63747f4fe4ecd4ce862f xorg-x11-server-Xwayland-devel-24.1.5-6.el10_0.2.s390x.rpm SHA-256: b555e3de4584da7c9ea486c3470bc81c458e13b6758014cafc380219cc455d8e Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 SRPM aarch64 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: e6fd08456f75971ba4904b032e3792878e036c0c750cf4e12a25a5464f33d278 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: 059ad3b9ec2a26967aa3681d93fdf0e1c617f93a8ee53ba734bff487fbb0630e xorg-x11-server-Xwayland-devel-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: 6859bbf2217f8ccdaab21fc08a4db7c2ae7ea66834cf4fd95afa4a269cb06d8b Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba aarch64 xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: 98673b65711eff13ad5871472044dbf97bc78cecba0dedf26ad5d9ae3a431df2 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: e6fd08456f75971ba4904b032e3792878e036c0c750cf4e12a25a5464f33d278 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.aarch64.rpm SHA-256: 059ad3b9ec2a26967aa3681d93fdf0e1c617f93a8ee53ba734bff487fbb0630e Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba s390x xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.s390x.rpm SHA-256: 7cb4e63348653ebe3b1b5d30ef95691db2a5cce5640038ff8a2d25a4fee8d003 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.s390x.rpm SHA-256: c5eab42c9860fd4fcec1e276611f81d7cb21bad25b0acf3c0ac2c577eb1e9f22 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.s390x.rpm SHA-256: 09dbff65a7872e856914e5bc6ca593c8f3942be9cf2a63747f4fe4ecd4ce862f Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba ppc64le xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: 253dc289aae81fd10e8003fc595e559c6e77ca9d824eabe5820be9842c5ac98a xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: 37e9d465f8bbe19c1d3e93cb44eb036a0233bf269f0333161a81c7ccbb6dd821 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.ppc64le.rpm SHA-256: f2deadace17e0553d75310b8284cdf75f577941fa2b85e063ecea088b4ae64ed Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.src.rpm SHA-256: 02c1ae47acb0e47b655857df15a24cf1e385cf9bef7476b2e60ae21b3ca50bba x86_64 xorg-x11-server-Xwayland-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: c9935e4842ce87df5df420145e05eaf5e4b453c95bb907d5eac20c8fb1c1c137 xorg-x11-server-Xwayland-debuginfo-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: 380797dcecdd392b9d8d8da6127d32b95d2cf46ec363acc9cd6b6c33b8011933 xorg-x11-server-Xwayland-debugsource-24.1.5-6.el10_0.2.x86_64.rpm SHA-256: 1343b6cd681d95ee44e779c1c41af858cfbec2b7129415a9ddcfd9395f72ddf4 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .