X.Org X server, XWayland: Multiple Vulnerabilities — GLSA 202608-14

{
  "id": "bb3319af2bfe5f2c0053a55b8a01b6624bf653a7793a46ec66a430cb929ea350",
  "url": "https://security.gentoo.org/glsa/202608-14",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "X.Org X server, XWayland: Multiple Vulnerabilities — GLSA 202608-14",
    "summary": "Multiple vulnerabilities affect X.Org X server and XWayland. Upgrade to the listed unaffected versions; no workaround is known.",
    "evidence": "Multiple vulnerabilities have been found in X.Org X server, XWayland.",
    "products": [
      {
        "name": {
          "value": "x11-base/xorg-server",
          "evidence": "Package x11-base/xorg-server on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": ">= 21.1.24",
            "evidence": "Unaffected versions >= 21.1.24"
          }
        ],
        "affected_versions": [
          {
            "value": "< 21.1.24",
            "evidence": "Affected versions < 21.1.24"
          }
        ]
      },
      {
        "name": {
          "value": "x11-base/xwayland",
          "evidence": "Package x11-base/xwayland on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": ">= 24.1.13",
            "evidence": "Unaffected versions >= 24.1.13"
          }
        ],
        "affected_versions": [
          {
            "value": "< 24.1.13",
            "evidence": "Affected versions < 24.1.13"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-49175",
        "evidence": "CVE-2025-49175"
      },
      {
        "value": "CVE-2025-49176",
        "evidence": "CVE-2025-49176"
      },
      {
        "value": "CVE-2025-49177",
        "evidence": "CVE-2025-49177"
      },
      {
        "value": "CVE-2025-49178",
        "evidence": "CVE-2025-49178"
      },
      {
        "value": "CVE-2025-49179",
        "evidence": "CVE-2025-49179"
      },
      {
        "value": "CVE-2025-49180",
        "evidence": "CVE-2025-49180"
      },
      {
        "value": "CVE-2025-62229",
        "evidence": "CVE-2025-62229"
      },
      {
        "value": "CVE-2025-62230",
        "evidence": "CVE-2025-62230"
      },
      {
        "value": "CVE-2025-62231",
        "evidence": "CVE-2025-62231"
      },
      {
        "value": "CVE-2026-33999",
        "evidence": "CVE-2026-33999"
      },
      {
        "value": "CVE-2026-34000",
        "evidence": "CVE-2026-34000"
      },
      {
        "value": "CVE-2026-34001",
        "evidence": "CVE-2026-34001"
      },
      {
        "value": "CVE-2026-34002",
        "evidence": "CVE-2026-34002"
      },
      {
        "value": "CVE-2026-34003",
        "evidence": "CVE-2026-34003"
      },
      {
        "value": "CVE-2026-50256",
        "evidence": "CVE-2026-50256"
      },
      {
        "value": "CVE-2026-50257",
        "evidence": "CVE-2026-50257"
      },
      {
        "value": "CVE-2026-50258",
        "evidence": "CVE-2026-50258"
      },
      {
        "value": "CVE-2026-50259",
        "evidence": "CVE-2026-50259"
      },
      {
        "value": "CVE-2026-50260",
        "evidence": "CVE-2026-50260"
      },
      {
        "value": "CVE-2026-50261",
        "evidence": "CVE-2026-50261"
      },
      {
        "value": "CVE-2026-50262",
        "evidence": "CVE-2026-50262"
      },
      {
        "value": "CVE-2026-50263",
        "evidence": "CVE-2026-50263"
      },
      {
        "value": "CVE-2026-55999",
        "evidence": "CVE-2026-55999"
      },
      {
        "value": "CVE-2026-56000",
        "evidence": "CVE-2026-56000"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity high"
  },
  "source_id": "official-gentoo-glsa",
  "document_id": 23663,
  "published_at": "2026-08-17T00:00:00+00:00"
}