High ELSA-2026-38488 1 CVE

Important: xorg-x11-server-Xwayland security update (Oracle Linux 8)

Published Jul 13, 2026 · Updated Jul 13, 2026

Ecosystem: Oracle Linux

Summary

[21.1.3-20.3]
- CVE fix for: CVE-2026-55999
Resolves: https://redhat.atlassian.net/browse/RHEL-191516

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	xorg-x11-server-Xwayland	0:21.1.3-20.el8_10.3

Vulnerabilities 1

High 8.5

CVE-2026-55999

xorg-server / xwayland glamor font atlas Heap Buffer Overflow

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

X.Org xwayland xorg-server xorg-server Debian Ubuntu Azure Linux Alpine Wolfi

Jul 8, 2026