We do often include affiliate links to earn us some pennies. See more here.

X.Org and Xwayland get new releases due to security issues

By -
Last updated: 16 Jan 2024 at 1:15 pm UTC

Here's another reminder that checking regularly for updates is always a good thing, because there's new releases available for both the X.Org X and Xwayland due to multiple reported security issues.

First up, here's the actual listed issues reported and fixed:

  • CVE-2023-6816 can be triggered by passing an invalid array index to DeviceFocusEvent or ProcXIQueryPointer.
  • CVE-2024-0229 can be triggered if a device has both a button and a key class and zero buttons.
  • CVE-2024-21885 can be triggered if a device with a given ID was removed and a new device with the same ID added both in the same operation.
  • CVE-2024-21886 can be triggered by disabling a master device with disabled slave devices.
  • CVE-2024-0409 can be triggered by enabling SELinux xserver_object_manager and running a client.
  • CVE-2024-0408 can be triggered by enabling SELinux xserver_object_manager and creating a GLX PBuffer.

This security advisory went public on the X.Org mailing list this morning.

The issues are present in X.Org X server prior to 21.1.11 and Xwayland prior to 23.2.4, both of which were just announced and released. The xorg-server 21.1.11 release additionally "also contains a fix for XRandR to allow for multiple virtual monitors on a physical display" plus xwayland 23.2.4 additionally "also contains several other fixes for glamor, libEI support, and FreeBSD".

Article taken from GamingOnLinux.com.
15 Likes
About the author -
author picture
I am the owner of GamingOnLinux. After discovering Linux back in the days of Mandrake in 2003, I constantly checked on the progress of Linux until Ubuntu appeared on the scene and it helped me to really love it. You can reach me easily by emailing GamingOnLinux directly. You can also follow my personal adventures on Bluesky.
See more from me
All posts need to follow our rules. For users logged in: please hit the Report Flag icon on any post that breaks the rules or contains illegal / harmful content. Guest readers can email us for any issues.
26 comments Subscribe
Page: 1/2»
  Go to:

slaapliedje 16 Jan 2024
This should be posted on X and break everyone's brain. :P
eridanired123 16 Jan 2024
This should be posted on X and break everyone's brain. :P

It took me a minute to realize how posting anything to a window system made any sense.
beko 16 Jan 2024
This should be posted on X and break everyone's brain. :P

It took me a minute to realize how posting anything to a window system made any sense.
Same. In fact it only clicked after reading your comment. What a mess
slaapliedje 16 Jan 2024
This should be posted on X and break everyone's brain. :P

It took me a minute to realize how posting anything to a window system made any sense.
Haha, indeed. I'm betting Elon would have taken over X.org if he could.
Purple Library Guy 16 Jan 2024
This should be posted on X and break everyone's brain. :P

It took me a minute to realize how posting anything to a window system made any sense.
Same. In fact it only clicked after reading your comment. What a mess
Ohhh, now I get it! He meant "the social media platform formerly known as Twitter"!
Pengling 16 Jan 2024
X posting about X on X, which people are viewing with X? ARGH!
chr 17 Jan 2024
X posting about X on X, which people are viewing with X? ARGH!

This frustration is making me click the x button on the top-right of this window...
StoneColdSpider 17 Jan 2024
X posting about X on X, which people are viewing with X? ARGH!

This frustration is making me click the x button on the top-right of this window...
Its making me press the X button on my Xbox controller while on my Xbox viewing this in Xplorer....... Shit is insane......
fenglengshun 17 Jan 2024
Haha, indeed. I'm betting Elon would have taken over X.org if he could.
Elon would be a Wayland hater if he's a Linux user lol
beko 17 Jan 2024
Tell me. I'm an X [X4 currently] gamer. That's ruining my childhood memories of the X-Verse.

…or on any 4X game, of course.
LoudTechie 17 Jan 2024
Tell me. I'm an X [X4 currently] gamer. That's ruining my childhood memories of the X-Verse.

…or on any 4X game, of course.
But are you a generation X gamer.
slaapliedje 17 Jan 2024
X posting about X on X, which people are viewing with X? ARGH!

This frustration is making me click the x button on the top-right of this window...
The proper place for the X button, looking at you, Apple! I've looked up how to flip that to the other side on macOS, and apparently the Almighty Apple has spoken and does not allow such things... All other operating systems I've ever used has it on the right side... but not macOS...
Pengling 17 Jan 2024
The proper place for the X button, looking at you, Apple! I've looked up how to flip that to the other side on macOS, and apparently the Almighty Apple has spoken and does not allow such things... All other operating systems I've ever used has it on the right side... but not macOS...
It's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?

Anyhow, the top-left is clearly the right place for it.

!EXIT BUTTON, YEAH! :P

After all, you don't want Close to be anywhere near to Minimise and Maximise, and it's convenient to have it near to the menu you use to open new things - that's simply good interface-design.

(Yes yes, I'm being a bit facetious, and I know I'm in the minority preferring to have the X there. I'm just glad that Linux desktop environments give us the options we want - Xfce lets me arrange these things however I like, for example, and I seem to recall that KDE also allows that.)
tuubi 17 Jan 2024
View PC info
  • Supporter Plus
It's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?
There was no X button on Amiga Workbench windows. But the dot-in-a-square the manual called "the Closing Gadget" was indeed at the top left.
Pengling 17 Jan 2024
There was no X button on Amiga Workbench windows. But the dot-in-a-square the manual called "the Closing Gadget" was indeed at the top left.
Yeah, that's the one - thanks. I never owned one myself, just had friends who did and have done a little bit of emulation, so it wasn't an immediately-clear memory!


Last edited by Pengling on 17 Jan 2024 at 6:05 pm UTC
slaapliedje 17 Jan 2024
The proper place for the X button, looking at you, Apple! I've looked up how to flip that to the other side on macOS, and apparently the Almighty Apple has spoken and does not allow such things... All other operating systems I've ever used has it on the right side... but not macOS...
It's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?

Anyhow, the top-left is clearly the right place for it.

!EXIT BUTTON, YEAH! :P

After all, you don't want Close to be anywhere near to Minimise and Maximise, and it's convenient to have it near to the menu you use to open new things - that's simply good interface-design.

(Yes yes, I'm being a bit facetious, and I know I'm in the minority preferring to have the X there. I'm just glad that Linux desktop environments give us the options we want - Xfce lets me arrange these things however I like, for example, and I seem to recall that KDE also allows that.)
Yes, but you can move it where ever you wish. Same with all of the DEs on Linux (even Gnome!). macOS does NOT let you move it around. I think the most you can do at this point is maybe change colors. It also uses 'maximize' buttons completely different than all the other DEs / Operating systems I've seen...

For what it's worth, the Atari ST also has it in the top left corner, with its maximize button in the top right. Though again, you can install replacement desktops that'll let you change that (and add minimize).
beko 17 Jan 2024
But are you a generation X gamer.
I'd have to look up what that means.

Does that answer your question?
slaapliedje 17 Jan 2024
It's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?
There was no X button on Amiga Workbench windows. But the dot-in-a-square the manual called "the Closing Gadget" was indeed at the top left.
Ha, I've mucked around with enough of the theming stuff in AmigaOS over the years, that I can no longer remember where the close button is.
chr 18 Jan 2024
Haha, indeed. I'm betting Elon would have taken over X.org if he could.
Elon would be a Wayland hater if he's a Linux user lol

Elon would go so far as to start a company appearing to develop a better Wayland that runs inside magnetic tubes just to muddy the waters and take away some of the attention and investments from the Wayland that actually exists and works.
LoudTechie 18 Jan 2024
But are you a generation X gamer.
I'd have to look up what that means.

Does that answer your question?
Nah, I had to look it up too.
It means that you were born in the seventies.
1965 -1980
While you're here, please consider supporting GamingOnLinux on:

Reward Tiers: Patreon. Plain Donations: PayPal.

This ensures all of our main content remains totally free for everyone! Patreon supporters can also remove all adverts and sponsors! Supporting us helps bring good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!
Login / Register