0 mentions in 7 days · 2 in 30 days · 2 total · first seen · last
X.Org patched multiple security issues in X server 21.1.25 and Xwayland 24.1.14.
X.Org issued a security advisory on October 7, 2026, for multiple issues in the X server and Xwayland. Patches are in xorg-server-21.1.25 and xwayland-24.1.14; older releases are affected. The oss-security post does not name CVEs or report active exploitation.
X.Org patched 12 X server and Xwayland flaws, including nine that can allow arbitrary code execution.
X.Org fixed 12 security flaws in the X server and Xwayland, released in xorg-server 21.1.25 and xwayland 24.1.14. Nine can lead to arbitrary code execution, while the other three can crash the server or disclose information. The bugs include seven buffer overflows or out-of-bounds writes, three use-after-free issues, one double free, and one out-of-bounds read; ten say an authenticated X client can trigger the flaw. CVE-2026-93522, a heap overflow in Glamor CopyArea, affects only Xwayland, and CVE-2026-93520 and CVE-2026-93521 finish incomplete earlier fixes.