Every article tag can be clicked to get a list of all articles in that category. Every article tag also has an RSS feed! You can customize an RSS feed too!
We do often include affiliate links to earn us some pennies. See more here.

X.Org and Xwayland get new releases due to security issues

By - | Views: 32,063

Here's another reminder that checking regularly for updates is always a good thing, because there's new releases available for both the X.Org X and Xwayland due to multiple reported security issues.

First up, here's the actual listed issues reported and fixed:

  • CVE-2023-6816 can be triggered by passing an invalid array index to DeviceFocusEvent or ProcXIQueryPointer.
  • CVE-2024-0229 can be triggered if a device has both a button and a key class and zero buttons.
  • CVE-2024-21885 can be triggered if a device with a given ID was removed and a new device with the same ID added both in the same operation.
  • CVE-2024-21886 can be triggered by disabling a master device with disabled slave devices.
  • CVE-2024-0409 can be triggered by enabling SELinux xserver_object_manager and running a client.
  • CVE-2024-0408 can be triggered by enabling SELinux xserver_object_manager and creating a GLX PBuffer.

This security advisory went public on the X.Org mailing list this morning.

The issues are present in X.Org X server prior to 21.1.11 and Xwayland prior to 23.2.4, both of which were just announced and released. The xorg-server 21.1.11 release additionally "also contains a fix for XRandR to allow for multiple virtual monitors on a physical display" plus xwayland 23.2.4 additionally "also contains several other fixes for glamor, libEI support, and FreeBSD".

Article taken from GamingOnLinux.com.
15 Likes
About the author -
author picture
I am the owner of GamingOnLinux. After discovering Linux back in the days of Mandrake in 2003, I constantly came back to check on the progress of Linux until Ubuntu appeared on the scene and it helped me to really love it. You can reach me easily by emailing GamingOnLinux directly. Find me on Mastodon.
See more from me
26 comments
Page: «2/3»
  Go to:

LoudTechie Jan 17
Quoting: bekoTell me. I'm an X [X4 currently] gamer. That's ruining my childhood memories of the X-Verse.

…or on any 4X game, of course.
But are you a generation X gamer.
slaapliedje Jan 17
Quoting: chr
Quoting: PenglingX posting about X on X, which people are viewing with X? ARGH!

This frustration is making me click the x button on the top-right of this window...
The proper place for the X button, looking at you, Apple! I've looked up how to flip that to the other side on macOS, and apparently the Almighty Apple has spoken and does not allow such things... All other operating systems I've ever used has it on the right side... but not macOS...
Pengling Jan 17
View PC info
  • Supporter
Quoting: slaapliedjeThe proper place for the X button, looking at you, Apple! I've looked up how to flip that to the other side on macOS, and apparently the Almighty Apple has spoken and does not allow such things... All other operating systems I've ever used has it on the right side... but not macOS...
It's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?

Anyhow, the top-left is clearly the right place for it.



After all, you don't want Close to be anywhere near to Minimise and Maximise, and it's convenient to have it near to the menu you use to open new things - that's simply good interface-design.

(Yes yes, I'm being a bit facetious, and I know I'm in the minority preferring to have the X there. I'm just glad that Linux desktop environments give us the options we want - Xfce lets me arrange these things however I like, for example, and I seem to recall that KDE also allows that.)
tuubi Jan 17
View PC info
  • Supporter
Quoting: PenglingIt's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?
There was no X button on Amiga Workbench windows. But the dot-in-a-square the manual called "the Closing Gadget" was indeed at the top left.
Pengling Jan 17
View PC info
  • Supporter
Quoting: tuubiThere was no X button on Amiga Workbench windows. But the dot-in-a-square the manual called "the Closing Gadget" was indeed at the top left.
Yeah, that's the one - thanks. I never owned one myself, just had friends who did and have done a little bit of emulation, so it wasn't an immediately-clear memory!


Last edited by Pengling on 17 January 2024 at 6:05 pm UTC
slaapliedje Jan 17
Quoting: Pengling
Quoting: slaapliedjeThe proper place for the X button, looking at you, Apple! I've looked up how to flip that to the other side on macOS, and apparently the Almighty Apple has spoken and does not allow such things... All other operating systems I've ever used has it on the right side... but not macOS...
It's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?

Anyhow, the top-left is clearly the right place for it.



After all, you don't want Close to be anywhere near to Minimise and Maximise, and it's convenient to have it near to the menu you use to open new things - that's simply good interface-design.

(Yes yes, I'm being a bit facetious, and I know I'm in the minority preferring to have the X there. I'm just glad that Linux desktop environments give us the options we want - Xfce lets me arrange these things however I like, for example, and I seem to recall that KDE also allows that.)
Yes, but you can move it where ever you wish. Same with all of the DEs on Linux (even Gnome!). macOS does NOT let you move it around. I think the most you can do at this point is maybe change colors. It also uses 'maximize' buttons completely different than all the other DEs / Operating systems I've seen...

For what it's worth, the Atari ST also has it in the top left corner, with its maximize button in the top right. Though again, you can install replacement desktops that'll let you change that (and add minimize).
beko Jan 17
Quoting: LoudTechieBut are you a generation X gamer.
I'd have to look up what that means.

Does that answer your question?
slaapliedje Jan 17
Quoting: tuubi
Quoting: PenglingIt's been several decades now, so I may be misremembering, but wasn't it on the left on the Amiga, too?
There was no X button on Amiga Workbench windows. But the dot-in-a-square the manual called "the Closing Gadget" was indeed at the top left.
Ha, I've mucked around with enough of the theming stuff in AmigaOS over the years, that I can no longer remember where the close button is.
chr Jan 18
Quoting: fenglengshun
Quoting: slaapliedjeHaha, indeed. I'm betting Elon would have taken over X.org if he could.
Elon would be a Wayland hater if he's a Linux user lol

Elon would go so far as to start a company appearing to develop a better Wayland that runs inside magnetic tubes just to muddy the waters and take away some of the attention and investments from the Wayland that actually exists and works.
LoudTechie Jan 18
Quoting: beko
Quoting: LoudTechieBut are you a generation X gamer.
I'd have to look up what that means.

Does that answer your question?
Nah, I had to look it up too.
It means that you were born in the seventies.
1965 -1980
While you're here, please consider supporting GamingOnLinux on:

Reward Tiers: Patreon. Plain Donations: PayPal.

This ensures all of our main content remains totally free for everyone! Patreon supporters can also remove all adverts and sponsors! Supporting us helps bring good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!
Login / Register


Or login with...
Sign in with Steam Sign in with Google
Social logins require cookies to stay logged in.