portage-ng / portage / x11-base / xwayland / 26.0.99.903
portage-ng glsa
6 advisories reference x11-base/xwayland · none place version 26.0.99.903 in a vulnerable range
▸ GLSA 202608-14 X.Org X server, XWayland: Multiple Vulnerabilities this version unaffected high remote 2026-08-17

Multiple vulnerabilities have been found in X.Org X server, XWayland.

Announced
2026-08-17
Revised
2026-08-17
Access
remote
Bugs
#958340 #965271 #972712 #976628 #978969
Advisory
https://security.gentoo.org/glsa/202608-14

Affected packages

PackageArchVulnerableUnaffected
x11-base/xorg-server*< 21.1.24>= 21.1.24
x11-base/xwayland*< 24.1.13>= 24.1.13

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All X.Org X server, XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.24"

All X.Org X server, XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xwayland-24.1.13"

References

▸ GLSA 202506-04 X.Org X server, XWayland: Multiple Vulnerabilities this version unaffected high local 2025-06-12

A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.

Announced
2025-06-12
Revised
2025-06-12
Access
local
Bugs
#950290
Advisory
https://security.gentoo.org/glsa/202506-04

Affected packages

PackageArchVulnerableUnaffected
x11-base/xorg-server*< 21.1.16>= 21.1.16
x11-base/xwayland*< 24.1.6>= 24.1.6

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All X.Org X server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.16"

All XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xwayland-24.1.6"

References

▸ GLSA 202411-08 X.Org X server, XWayland: Multiple Vulnerabilities this version unaffected high local 2024-11-17

A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.

Announced
2024-11-17
Revised
2024-11-17
Access
local
Bugs
#928531 #942465
Advisory
https://security.gentoo.org/glsa/202411-08

Affected packages

PackageArchVulnerableUnaffected
x11-base/xorg-server*< 21.1.14>= 21.1.14
x11-base/xwayland*< 24.1.4>= 24.1.4

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All X.Org X server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.14"

All XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xwayland-24.1.4"

References

▸ GLSA 202401-30 X.Org X Server, XWayland: Multiple Vulnerabilities this version unaffected normal remote 2024-01-31

Multiple vulnerabilities have been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation or remote code execution.

Announced
2024-01-31
Revised
2024-01-31
Access
remote
Bugs
#916254 #919803 #922395
Advisory
https://security.gentoo.org/glsa/202401-30

Affected packages

PackageArchVulnerableUnaffected
x11-base/xorg-server*< 21.1.11>= 21.1.11
x11-base/xwayland*< 23.2.4>= 23.2.4

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X Server and XWayland. Please review the CVE identifiers referenced below for details.

Impact

The X server can be crashed by a malicious client, or potentially be compromised for remote code execution in environments with X11 forwarding.

Workaround

Users can ensure no untrusted clients can access the running X implementation.

Resolution

All X.Org X Server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.11"

All XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xwayland-23.2.4"

References

▸ GLSA 202305-30 X.Org X server, XWayland: Multiple Vulnerabilities this version unaffected high remote 2023-05-30

Multiple vulnerabilities have been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation or remote code execution.

Announced
2023-05-30
Revised
2023-05-30
Access
remote
Bugs
#829208 #877459 #885825 #893438 #903547
Advisory
https://security.gentoo.org/glsa/202305-30

Affected packages

PackageArchVulnerableUnaffected
x11-base/xorg-server*< 21.1.8>= 21.1.8
x11-base/xwayland*< 23.1.1>= 23.1.1

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All X.Org X server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.8"

All XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xwayland-23.1.1"

References

▸ GLSA 202210-30 X.Org X server, XWayland: Multiple Vulnerabilities this version unaffected high remote 2022-10-31

Multiple vulnerabilities have been discovered in the Xorg Server and XWayland, the worst of which can result in remote code execution.

Announced
2022-10-31
Revised
2022-10-31
Access
remote
Bugs
#857780
Advisory
https://security.gentoo.org/glsa/202210-30

Affected packages

PackageArchVulnerableUnaffected
x11-base/xorg-server*< 21.1.4>= 21.1.4
x11-base/xwayland*< 22.1.3>= 22.1.3

Background

The X Window System is a graphical windowing system based on a client/server model.

Description

Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All X.Org X server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.4"

All XWayland users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xwayland-22.1.3"

References