#x11

3 stories this week · 5 this month · 7 in 6 months · mostly security

Stories per day · 30 days

6 stories, newest first · one card per story

Fixes are in xorg-server 21.1.26 and xwayland 24.1.15; X.Org gave no severity scores or exploitation status.

Exploitation needs a connection to a malicious X11 server; ZDI rates CVE-2026-88807 at CVSS 8.8.

CVE-2026-94286 can crash libXtst clients; CVE-2016-7951 is an out-of-bounds issue limited to Ubuntu 16.04 LTS.

X.Org patched multiple security flaws in five X client libraries, with releases now available.

Ubuntu patched libX11 flaws that let a malicious X server crash clients or possibly run code.

Simon Tatham reports that Zoom's Linux client proactively reads the X11 clipboard, potentially exposing copied passwords and other sensitive data.

Stories tagged #x11