Security
Security
Multiple vulnerabilities have been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation or remote code execution.
| Package | x11-base/xorg-server on all architectures |
|---|---|
| Affected versions | < 21.1.11 |
| Unaffected versions | >= 21.1.11 |
| Package | x11-base/xwayland on all architectures |
|---|---|
| Affected versions | < 23.2.4 |
| Unaffected versions | >= 23.2.4 |
The X Window System is a graphical windowing system based on a client/server model.
Multiple vulnerabilities have been discovered in X.Org X Server and XWayland. Please review the CVE identifiers referenced below for details.
The X server can be crashed by a malicious client, or potentially be compromised for remote code execution in environments with X11 forwarding.
Users can ensure no untrusted clients can access the running X implementation.
All X.Org X Server users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.11"
All XWayland users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-base/xwayland-23.2.4"