Summary
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.
Security Fix(es):
* xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | xorg-x11-server-common | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-devel | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-source | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-Xdmx | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-Xephyr | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-Xnest | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-Xorg | 1.20.11-28.el8_10.3 |
| AlmaLinux · 8 | xorg-x11-server-Xvfb | 1.20.11-28.el8_10.3 |
Vulnerabilities 1
-
High 8.5
xorg-server / xwayland glamor font atlas Heap Buffer Overflow
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.