X.Org X server, XWayland: Multiple Vulnerabilities — GLSA 202506-04

A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.

Package	x11-base/xorg-server on all architectures
Affected versions	< 21.1.16
Unaffected versions	>= 21.1.16

Package	x11-base/xwayland on all architectures
Affected versions	< 24.1.6
Unaffected versions	>= 24.1.6

The X Window System is a graphical windowing system based on a client/server model.

Multiple vulnerabilities have been discovered in X.Org X server and XWayland. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All X.Org X server users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=x11-base/xorg-server-21.1.16"

All XWayland users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=x11-base/xwayland-24.1.6"

Release date
June 12, 2025

Latest revision
June 12, 2025: 1

Severity
high

Exploitable
local

Bugzilla entries