Not even two weeks after a dozen X.Org Server and XWayland vulnerabilities, 17 more were disclosed, this time in the X.Org client libraries.
What’s affected
libX11, libXi (X Input), libXpm (X Pixmap), libXrender (X RENDER) and libXtst (X TEST). Most are out-of-bounds reads and writes, plus some heap buffer overflows and possible denial of service.
Fixed versions
- libX11 1.8.14
- libXi 1.8.4
- libXpm 3.5.20
- libXrender 0.9.13
- libXtst 1.2.6
My take
Even on a Wayland desktop these libraries are almost certainly installed for XWayland apps. Run your normal system update (on Omarchy, that’s the usual update from the menu) once your distro picks up the new packages.
