Lucene search

Gentoo FoundationGLSA-202401-30

HistoryJan 31, 2024 - 12:00 a.m.

X.Org X Server, XWayland: Multiple Vulnerabilities

2024-01-3100:00:00

Gentoo Foundation

security.gentoo.org

x window system

client/server

vulnerabilities

x11 forwarding

x.org

xwayland

cve

upgrade

workaround

8.5 High

AI Score

Confidence

Low

0.266 Low

EPSS

Percentile

96.7%

The X Window System is a graphical windowing system based on a client/server model.

Multiple vulnerabilities have been discovered in X.Org X Server and XWayland. Please review the CVE identifiers referenced below for details.

The X server can be crashed by a malicious client, or potentially be compromised for remote code execution in environments with X11 forwarding.

Users can ensure no untrusted clients can access the running X implementation.

All X.Org X Server users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose "&gt;=x11-base/xorg-server-21.1.11"

All XWayland users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose "&gt;=x11-base/xwayland-23.2.4"

OSVersionArchitecturePackageVersionFilename
Gentooanyallx11-base/xorg-server< 21.1.11UNKNOWN
Gentooanyallx11-base/xwayland< 23.2.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Gentoo	any	all	x11-base/xorg-server	< 21.1.11	UNKNOWN
Gentoo	any	all	x11-base/xwayland	< 23.2.4	UNKNOWN