# Seventeen security vulnerabilities disclosed in X.Org client libraries

> **Key takeaway:** Multiple X.Org client libraries have been patched to address seventeen newly disclosed vulnerabilities including buffer overflows and denial of service risks.

**Published:** 2026-10-16T19:20:39+00:00 
**Source:** Phoronix Benchmarks & Drivers 
**Category:** kernel-os 
**Canonical URL:** https://fosswire.org/news/seventeen-security-vulnerabilities-disclosed-in-xorg-client-.html 

## Summary
Following recent disclosures for X.Org Server and XWayland, seventeen additional vulnerabilities have been made public affecting several X.Org client libraries. The flaws, discovered by various researchers, primarily involve out-of-bounds reads and writes, heap buffer overflows, and potential denial of service. Users should update to the patched versions of libX11, libXi, libXpm, libXrender, and libXtst.

## Affected libraries and fixes
- **libX11**: Updated to 1.8.14
- **libXi**: Updated to 1.8.4
- **libXpm**: Updated to 3.5.20
- **libXrender**: Updated to 0.9.13
- **libXtst**: Updated to 1.2.6
- Vulnerability types include **out-of-bounds reads/writes**, **heap buffer overflows**, and **denial of service**.

## Why it matters
These vulnerabilities affect the foundational client libraries used by many Linux desktop environments and applications relying on the X Window System.