Budgie going Wayland Only

Chat about Zorin
11

This is commonly stated on the web without support. X11 is updated and currently maintained. The misconception probably stems from that X11 receives updates with bug patches but no new major releases that bring new features.
Not only is Xorg active - they are the very group doing Wayland.

Just like above.
Wayland has security issues.
Everything has security issues.

Yes, security concerns were raised about X11 windowing and input events - which have also been addressed and patched - because as noted above - Xorg are active:

October 29, 2024:

  • vulnerability in the _XkbSetCompatMap function, identified as CVE-2024-9632. This vulnerability could potentially allow privilege escalation. The issue has been addressed in xwayland 24.1.4 and xorg-server 21.1.14.

April 3, 2024:

  • CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents.
  • CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice.
  • CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap.
  • CVE-2024-31083: Use-after-free in ProcRenderAddGlyphs.These vulnerabilities have been fixed in xwayland 23.2.5 and xorg-server 21.1.12. Notably, the fix for CVE-2024-31083 introduced a regression, which was subsequently resolved in xwayland 23.2.6 and xorg-server 21.1.13.

January 16, 2024:

  • CVE-2023-6816: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer.
    = CVE-2024-0229: Reattaching to a different master device may lead to out-of-bounds memory access.
    = CVE-2024-21885: Heap buffer overflow in XISendDeviceHierarchyEvent.
    = CVE-2024-21886: Heap buffer overflow in DisableDevice.
    = CVE-2024-0409: SELinux context corruption.
    CVE-2024-0408: SELinux unlabeled GLX PBuffer.
4 Likes