Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:49605 - Security Advisory
Issued:
2026-08-03
Updated:
2026-08-03

RHSA-2026:49605 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Important: xorg-x11-server security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64

Fixes

  • BZ - 2496165 - CVE-2026-55999 xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow

CVEs

  • CVE-2026-55999

References

  • https://access.redhat.com/security/updates/classification/#important
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6

SRPM
xorg-x11-server-1.20.11-8.el8_6.1.src.rpm SHA-256: 66978d72793c151deddb7537ba5013445f160c468e06ac77dada9da0d0347195
x86_64
xorg-x11-server-Xdmx-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 05531eb9af91d31eda588971e0a915b01f04bd3f5676d9b1837caf6003dd5598
xorg-x11-server-Xdmx-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 7ba9dae6ccacd13f41e997559ee0aff60ffc7f179f5f1824adcc33fa72add436
xorg-x11-server-Xephyr-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: f2311a05ec15e39a49aeed3c04725f090bb6c764376a0fee5dbb4a8679d7074f
xorg-x11-server-Xephyr-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: ed240bfafb13a1b42ba8c8897ffae1960bdfc4f42aed4503aa0d2e806fa5f716
xorg-x11-server-Xnest-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 2a17e61448c493261693e5e5a935c9d9bf47b94f5a52ac941ef31229ebb34447
xorg-x11-server-Xnest-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 47e760637b91d6f2d40a6884ba678a6fbca620d89ce438ae30533d9896ff2728
xorg-x11-server-Xorg-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: a98b21c48cf603b90a1e30556f45c5daf88468ccb76ab6d18ee0596de7021bfd
xorg-x11-server-Xorg-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 9083d4d37d180847c6351a95963cb44df94e45a84b45d8d0f366c8d3a5b4b90f
xorg-x11-server-Xvfb-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 2102c70055220c6c882ba62a87cec57db55bf26d60617725df4ce4cdef42d20e
xorg-x11-server-Xvfb-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: eadd2b06497ea6aabc753300ca949d4fc3a780abd0b92158749f4f5cfb7636f3
xorg-x11-server-common-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 8825d76322d59cdc0e39ca7c42a554c5d47fe99b5038447268d460162e6f1916
xorg-x11-server-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: ba2876bfa9611bbbe4b473241a02b2e4010e26d77ff2d971c060131a572e5a8f
xorg-x11-server-debugsource-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: fafd5cca1b0e99d530848f1bb2fd7a137a0ea76dd6aaf9c90610824184a4dc28

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
xorg-x11-server-1.20.11-8.el8_6.1.src.rpm SHA-256: 66978d72793c151deddb7537ba5013445f160c468e06ac77dada9da0d0347195
x86_64
xorg-x11-server-Xdmx-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 05531eb9af91d31eda588971e0a915b01f04bd3f5676d9b1837caf6003dd5598
xorg-x11-server-Xdmx-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 7ba9dae6ccacd13f41e997559ee0aff60ffc7f179f5f1824adcc33fa72add436
xorg-x11-server-Xephyr-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: f2311a05ec15e39a49aeed3c04725f090bb6c764376a0fee5dbb4a8679d7074f
xorg-x11-server-Xephyr-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: ed240bfafb13a1b42ba8c8897ffae1960bdfc4f42aed4503aa0d2e806fa5f716
xorg-x11-server-Xnest-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 2a17e61448c493261693e5e5a935c9d9bf47b94f5a52ac941ef31229ebb34447
xorg-x11-server-Xnest-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 47e760637b91d6f2d40a6884ba678a6fbca620d89ce438ae30533d9896ff2728
xorg-x11-server-Xorg-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: a98b21c48cf603b90a1e30556f45c5daf88468ccb76ab6d18ee0596de7021bfd
xorg-x11-server-Xorg-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 9083d4d37d180847c6351a95963cb44df94e45a84b45d8d0f366c8d3a5b4b90f
xorg-x11-server-Xvfb-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 2102c70055220c6c882ba62a87cec57db55bf26d60617725df4ce4cdef42d20e
xorg-x11-server-Xvfb-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: eadd2b06497ea6aabc753300ca949d4fc3a780abd0b92158749f4f5cfb7636f3
xorg-x11-server-common-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: 8825d76322d59cdc0e39ca7c42a554c5d47fe99b5038447268d460162e6f1916
xorg-x11-server-debuginfo-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: ba2876bfa9611bbbe4b473241a02b2e4010e26d77ff2d971c060131a572e5a8f
xorg-x11-server-debugsource-1.20.11-8.el8_6.1.x86_64.rpm SHA-256: fafd5cca1b0e99d530848f1bb2fd7a137a0ea76dd6aaf9c90610824184a4dc28

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility