Back Linuxsecurity

Fedora 43 Xwayland Critical Update CVE-2026-55999 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 12, 2026

* Wed Jul 8 2026 Peter Hutterer - 24.1.13-1 - Update to xwayland 24.1.13 Security fixes for: CVE-2026-55999, CVE-2026-56000 * Sat Jun 13 2026 Yaakov Selkowitz - 24.1.12-2 - Rebuilt for openssl 4.0

Fedora Update Notification FEDORA-2026-6a00d3109f 2026-07-12 00:58:35.903689+00:00 Name : xorg-x11-server-Xwayland Product : Fedora 43 Version : 24.1.13 Release : 1.fc43 URL : Summary : Xwayland Description : Xwayland is an X server for running X clients under Wayland.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6a00d3109f' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for Fedora Address Multiple CVEs Fedora has released critical updates for two components, Xwayland and OpenImageIO, addressing vulnerabilities CVE-2026-55999, CVE-2026-56000, and CVE-2024-55195. The updates were published on July 8, 2026, and July 12, 2026, respectively. CVE-2026-55999 and CVE-2026-56000 affect Fedora 43 and 44's Xwayland, while CVE-2024-55195 impacts OpenImageIO in Fedora 44. The vulnerabilities could allow attackers to exploit allocation size issues, potentially leading to denial of service or other malicious activities. Users are advised to apply the updates using the 'dnf' command. The updates are critical for maintaining system integrity and security. Failure to update may leave systems vulnerable to exploitation. 7 sources 74

Extracted Entities

CVEs (2)

CVE-2026-55999 CVE-2026-56000