Red Hat Product Errata RHSA-2026:50718 - Security Advisory
Issued:
2026-08-05
Updated:
2026-08-05

RHSA-2026:50718 - Security Advisory

Synopsis

Important: xorg-x11-server-Xwayland security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

  • xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)
  • X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2496165 - CVE-2026-55999 xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow
  • BZ - 2496193 - CVE-2026-56000 X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent()

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
x86_64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: c5d089747c0884ff1056828b1a462c32c1b37aea29d8fbf63a340fae02b9ac2e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 4b3075639d282c3037fb00112d4a2f3a7f7253952fc09fdfff7e48a09caf386c
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 1e54fdf8b4ba19270bec6285021e1d22e5f06d00593c0a1dd41f60294a8688d9

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
x86_64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: c5d089747c0884ff1056828b1a462c32c1b37aea29d8fbf63a340fae02b9ac2e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 4b3075639d282c3037fb00112d4a2f3a7f7253952fc09fdfff7e48a09caf386c
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 1e54fdf8b4ba19270bec6285021e1d22e5f06d00593c0a1dd41f60294a8688d9

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
s390x
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 0fbef5fe74ab4139a38ef5fd93ff587984fa6788cfc8693a8c9356509eb03e75
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 101b0750f5b48f4f7b5c9a61d35827822f7f22be27aa38cf1b53e1832d2c0367
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.s390x.rpm SHA-256: dfcd93407bfd06e86fe08f8ddc7e961cc5c06ebb9a74d003bd20b159ad6342ea

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
ppc64le
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: f5603944dc70b91a20dbf1b9e26cdb7edb25f92782baadd26df0516963789909
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: 09946dc6848d308372dacebebc496aa00606924fbe6038534e982f2e7c67420e
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: d7fc3afa37886b857d25cfc24a9235937c68fffea8405bc8e20801fedf18d654

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
aarch64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 6b786f0a788a99f4df1dd6b4fa38c019600c974f435788a00b0b645bce9a8a1e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: a71f26123c8ebef60a205a2db61bebb1952e59128d0b7a0433c048453fa2251b
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 9e2c07c5c6d8027307f9720248227366f6b9245ba1cc2da8ca26dac12e9bf9a2

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
ppc64le
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: f5603944dc70b91a20dbf1b9e26cdb7edb25f92782baadd26df0516963789909
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: 09946dc6848d308372dacebebc496aa00606924fbe6038534e982f2e7c67420e
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: d7fc3afa37886b857d25cfc24a9235937c68fffea8405bc8e20801fedf18d654

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
x86_64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: c5d089747c0884ff1056828b1a462c32c1b37aea29d8fbf63a340fae02b9ac2e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 4b3075639d282c3037fb00112d4a2f3a7f7253952fc09fdfff7e48a09caf386c
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 1e54fdf8b4ba19270bec6285021e1d22e5f06d00593c0a1dd41f60294a8688d9

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.i686.rpm SHA-256: a1e8aa86378d89ee5132f6a0ebb28b7271467b6e87673aae5ba74bfe0175900c
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.i686.rpm SHA-256: 73a583a45221af55a5f95f6b0af914aaef8803188cbbf2ea8774d62be2bbd9dd
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 4b3075639d282c3037fb00112d4a2f3a7f7253952fc09fdfff7e48a09caf386c
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.i686.rpm SHA-256: 0c4be130e6af95762e3ec031b3820b7d98b0fcc95c96e533fa591ea3aeed74ac
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 1e54fdf8b4ba19270bec6285021e1d22e5f06d00593c0a1dd41f60294a8688d9
xorg-x11-server-Xwayland-devel-23.2.7-6.el9_6.3.i686.rpm SHA-256: ff258b995b340181cc1bec1d6a35f77dd25dbc14eb4dafee75e663641c5c8c3f
xorg-x11-server-Xwayland-devel-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 71b678ea3e03b4ccc8d5b97dc31bfa597b588ece1306aa813cc67b25260e690b

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: 09946dc6848d308372dacebebc496aa00606924fbe6038534e982f2e7c67420e
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: d7fc3afa37886b857d25cfc24a9235937c68fffea8405bc8e20801fedf18d654
xorg-x11-server-Xwayland-devel-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: f4819036256181bcc51719e3d8f495c921a07a557ab65c7905fb7f5b7f8bfe7d

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 101b0750f5b48f4f7b5c9a61d35827822f7f22be27aa38cf1b53e1832d2c0367
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.s390x.rpm SHA-256: dfcd93407bfd06e86fe08f8ddc7e961cc5c06ebb9a74d003bd20b159ad6342ea
xorg-x11-server-Xwayland-devel-23.2.7-6.el9_6.3.s390x.rpm SHA-256: accd992dbd855485ab1e6dab17a6c6cf0ba7aa421b250fcaa7d173e289fde512

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: a71f26123c8ebef60a205a2db61bebb1952e59128d0b7a0433c048453fa2251b
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 9e2c07c5c6d8027307f9720248227366f6b9245ba1cc2da8ca26dac12e9bf9a2
xorg-x11-server-Xwayland-devel-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 3ebc51b60b7a357dec48aae5a03dec2a3aded5a46734374dcee55e0e0a54e0ac

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
aarch64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 6b786f0a788a99f4df1dd6b4fa38c019600c974f435788a00b0b645bce9a8a1e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: a71f26123c8ebef60a205a2db61bebb1952e59128d0b7a0433c048453fa2251b
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 9e2c07c5c6d8027307f9720248227366f6b9245ba1cc2da8ca26dac12e9bf9a2

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
s390x
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 0fbef5fe74ab4139a38ef5fd93ff587984fa6788cfc8693a8c9356509eb03e75
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 101b0750f5b48f4f7b5c9a61d35827822f7f22be27aa38cf1b53e1832d2c0367
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.s390x.rpm SHA-256: dfcd93407bfd06e86fe08f8ddc7e961cc5c06ebb9a74d003bd20b159ad6342ea

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
x86_64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: c5d089747c0884ff1056828b1a462c32c1b37aea29d8fbf63a340fae02b9ac2e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 4b3075639d282c3037fb00112d4a2f3a7f7253952fc09fdfff7e48a09caf386c
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.x86_64.rpm SHA-256: 1e54fdf8b4ba19270bec6285021e1d22e5f06d00593c0a1dd41f60294a8688d9

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
aarch64
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 6b786f0a788a99f4df1dd6b4fa38c019600c974f435788a00b0b645bce9a8a1e
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: a71f26123c8ebef60a205a2db61bebb1952e59128d0b7a0433c048453fa2251b
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.aarch64.rpm SHA-256: 9e2c07c5c6d8027307f9720248227366f6b9245ba1cc2da8ca26dac12e9bf9a2

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
ppc64le
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: f5603944dc70b91a20dbf1b9e26cdb7edb25f92782baadd26df0516963789909
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: 09946dc6848d308372dacebebc496aa00606924fbe6038534e982f2e7c67420e
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.ppc64le.rpm SHA-256: d7fc3afa37886b857d25cfc24a9235937c68fffea8405bc8e20801fedf18d654

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.src.rpm SHA-256: 21e8e37a6306b06b8a73cb98e0c740ab16ac34a11c068f32f3155a62fbfa96fc
s390x
xorg-x11-server-Xwayland-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 0fbef5fe74ab4139a38ef5fd93ff587984fa6788cfc8693a8c9356509eb03e75
xorg-x11-server-Xwayland-debuginfo-23.2.7-6.el9_6.3.s390x.rpm SHA-256: 101b0750f5b48f4f7b5c9a61d35827822f7f22be27aa38cf1b53e1832d2c0367
xorg-x11-server-Xwayland-debugsource-23.2.7-6.el9_6.3.s390x.rpm SHA-256: dfcd93407bfd06e86fe08f8ddc7e961cc5c06ebb9a74d003bd20b159ad6342ea

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.