ALAS2023-2026-1944


Amazon Linux 2023 Security Advisory: ALAS2023-2026-1944
Advisory Released Date: 2026-07-20
Advisory Updated Date: 2026-07-20
Severity: Important

Issue Overview:

glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)

GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)


Affected Packages:

xorg-x11-server-Xwayland


Issue Correction:
Run dnf update xorg-x11-server-Xwayland --releasever 2023.12.20260720 or dnf update --advisory ALAS2023-2026-1944 --releasever 2023.12.20260720 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    xorg-x11-server-Xwayland-devel-24.1.3-1.amzn2023.0.6.aarch64
    xorg-x11-server-Xwayland-debuginfo-24.1.3-1.amzn2023.0.6.aarch64
    xorg-x11-server-Xwayland-24.1.3-1.amzn2023.0.6.aarch64
    xorg-x11-server-Xwayland-debugsource-24.1.3-1.amzn2023.0.6.aarch64

src:
    xorg-x11-server-Xwayland-24.1.3-1.amzn2023.0.6.src

x86_64:
    xorg-x11-server-Xwayland-debuginfo-24.1.3-1.amzn2023.0.6.x86_64
    xorg-x11-server-Xwayland-devel-24.1.3-1.amzn2023.0.6.x86_64
    xorg-x11-server-Xwayland-24.1.3-1.amzn2023.0.6.x86_64
    xorg-x11-server-Xwayland-debugsource-24.1.3-1.amzn2023.0.6.x86_64