Synopsis:
xorg-x11-server security updateSummary:
An update for xorg-x11-server is now available for openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4Description:
X.Org X11 X server
Security Fix(es):
Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.(CVE-2026-55999)Topic:
An update for xorg-x11-server is now available for openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1,openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4.
openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:
HighAffected Component:
xorg-x11-server
1.20.8-39.oe2003sp41.20.8-39.oe2003sp41.20.8-39.oe2003sp41.20.8-39.oe2003sp41.20.8-39.oe2003sp41.20.8-39.oe2003sp41.20.11-45.oe2203sp41.20.11-45.oe2203sp41.20.11-45.oe2203sp41.20.11-45.oe2203sp4Exploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:HI:HA:H7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H