X.Org News Archives

Open-source developer Jos Dehaes wrote in to Phoronix today in announcing a new X11 server he has been working on from scratch that has been quietly developed to this point but now ready to announce to the world... The YSERVER.

There are nine new security vulnerabilities impacting the X.Org Server as well as the XWayland component. Yep, more than a decade after X.Org Server security issues began coming to light with a security research acknowledging it's a disaster and "it's worse than it looks", it continues holding true.

X.Org Server 21.1.22 is out today and driven by five new security vulnerabilities being disclosed for the aging codebase. In turn these vulnerabilities also impact XWayland too and thus necessitating the XWayland 24.1.10 release.

This Valentine's Day there is a lot of red on the screen for the X.Org Server with the code delta as a result of renaming of their main Git development branch and in the process selectively dropping questionable patches to the prior "master" codebase.

The X.Org Foundation has announced that this year's X.Org Developers Conference will be taking place in Toronto, Canada and hosted by Arm.

While we wait to see what comes of the new X.Org Server Git branch plans and a possible X.Org Server 26.1 release, several X.Org libraries saw new point releases this weekend. These seldom-updated libraries saw new releases to ship various build fixes and other minor improvements.

A proposal has been laid out for a new X.Org Server "main" Git branch to house their development going forward and cleaning up the development lapses over the past few years. Ultimately the hope is for having a new cleaned-up X.Org Server and XWayland Git branch for shipping new releases in 2026.

X.Org package wrangler Alan Coopersmith at Oracle announced today the release of imake 1.0.11, the newest version of this utility that 20+ years ago was used extensively as part of the X Window System build process for generating Makefiles from a template. With this first imake point release in two years, imake itself can now be built via Meson and there is now support for RISC-V and LoongArch architectures.

An important fix has made it into the X.Org Server XWayland codebase ahead of the new year. XWayland has been fixed to avoid sending incorrect pointer coordinates to X11 clients on pointer enter events.

For X11/X.Org fans there is a new Christmas surprise: Phoenix as an in-development X Server written from scratch using the Zig programming language.

For X.Org Server users there is a new release of xorgproto for the holidays. Xorgproto as the set of headers and specifications for the X11 core protocols and extensions is out with its first new release since March 2024.

Red Hat's Peter Hutterer announced the release today of xkbcomp 1.5, the CLI utility used for compiling X Keyboard Extension (XBD) keyboard descriptions for the X.Org Server. Driving this new xkbcomp release are fixes for four security issues.

For those continuing to make use of the X.Org Server, a new point release is now available in the 21.1 series. While most often X.Org Server stable releases these days are driven by shipping new security fixes, the X.Org Server 21.1.21 release is to fix several regressions introduced for various functional issues.

Red Hat's leading Linux input expert Peter Hutterer released libinput 1.30 today as the newest update to this input handling library used on both X.Org and Wayland desktops.

One of the NVIDIA presentations at the recent XDC2025 developer conference was not around the NVIDIA driver itself but the ongoing fragmentation that's happening within the Linux Direct Rendering Manager (DRM) subsystem and arguing the need for unifying more driver-side APIs for supporting different Linux DRM clinets.

The libinput input handling library for the Linux desktop on both Wayland and X.Org based systems is rolling out Lua plug-in support. Out today is libinput 1.30-rc1 with the initial infrastructure for supporting plug-ins written in the Lua scripting language.

The Trend Micro Zero Day Initiative has uncovered three more security vulnerabilities affecting the X.Org Server and the derived XWayland source code.

The xf86-input-mouse driver for mouse support when using the X.Orrg Server on operating systems like the BSDs, Illumos, GNU Hurd, and Solaris is out with a rare update.

Announced just once month ago was Wayback as an X11 compatibility layer build atop Wayland components. In the past month Wayback has been off to a quick start with a goal of being production-ready next year and has also already became a project under the FreeDesktop.org umbrella. Today marks the release of Wayback 0.1 as the first preview release for this X11 compatibility layer.

Nearly one year after the merge request was first opened, back-ported now to the X.Org Server 21.1 stable branch are a number of GLAMOR 2D acceleration fixes around OpenGL ES 2.x as well as supporting OpenGL ES 3.x shaders for this generic 2D acceleration over OpenGL for the xorg-server and XWayland.

A nice improvement was merged today to the X.Org Server for benefiting the GLAMOR 2D acceleration code when using the Zink OpenGL-on-Vulkan driver.

XLibre 25.0 was just released as the first tagged release of this recent X.Org Server fork.

Released yesterday were X.Org Server 21.1.17 and XWayland 24.1.7 to address another batch of six security vulnerabilities reported by security researchers. Out today is X.Org Server 21.1.18 and XWayland 24.1.8 in order to further button up one of the security issues reported yesterday.

The X.Org Server 21.1.17 and XWayland 24.1.7 point releases were issued today to fix the latest batch of security issues.

The X.Org Server has been seeing a lot of commits this week... to revert bad code.

Pixman as the open-source pixel manipulation library used by the X.Org Server and Cairo graphics library is out today with Pixman 0.46 as the newest feature release.

One month ago FreeDesktop.org/X.Org experienced a new cloud crisis with Equinix Metal shutting down and losing access to all the FreeDesktop.org cloud/hosting resources at the end of April. FreeDesktop.org GitLab powers not only the X.Org projects but also Mesa, Wayland, and countless other Linux desktop open-source projects. Fortunately, it looks like they will have a new solution in time.

Eight new security issues have now been made public around the X.Org Server codebase that also impact XWayland.

About five years ago X.Org / FreeDesktop.org was experiencing a cloud hosting crisis with their cloud costs running out of control after losing free credits for Google Cloud and the continuous integration (CI) testing driving up expenses. They ended up switching public cloud providers over to Equinix. Equinix ended up sponsoring the X.Org Foundation / FreeDesktop.org with their cloud/hosting needs but now on short notice that is coming to an end.

To much surprise, the X.Org Server Git tree saw the most commits in 2024 going all the way back to 2014... While there were many more commits than in years prior, it's not a sign of resurgence for the X.Org Server with Wayland continuing to become the dominant force on the Linux desktop.

Xcompmgr 1.1.10 was released yesterday as the newest update to this basic X11 compositor providing "eye candy" effects for classic X.Org usage.

CVE-2024-9632 was made public today as the latest security vulnerability affecting the X.Org Server. The CVE-2024-9632 security issue has been present in the codebase now for 18 years and can lead to local privilege escalation.

It's taken until now to add FreeBSD to the X.Org Continuous Integration (CI) automated testing so that all proposed changes to the X.Org Server can now be build-tested on FreeBSD rather than just Linux.

Alan Coopersmith of Oracle -- thanks to his work on Solaris and maintaining the X11 support -- continues to be one of the few developers left managing new X.Org software component releases. This weekend Coopersmith released libX11 1.8.10 as the newest version of this client-side library for the core X11 protocol.

Coming just a day after posting a big set of patches for improving VRR display support under the X.Org Server, Enrico Weigelt today announced the release of the X.Org Testing Ground v0.0.4 software that now supports OpenIndiana / Illumos (OpenSolaris) in addition to its Linux and BSD platform support.

Open-source developer Enrico Weigelt has in recent months taken to near single-handedly maintain and further enhance the aging X.Org Server codebase. The latest area that Weigelt has been working to improve is around the X.Org Server's Variable Refresh Rate (VRR) support.

Last week marked the inaugural release of the X.Org Testing Ground Toolkit to make it easier to compile the X.Org Server. That v0.0.1 release was limited to supporting Debian/Apt-based Linux distributions while now this helper toolkit has been extended to support FreeBSD and NetBSD too.

While the upstream X.Org Server development remains slow with most of the large vendors treating it in maintenance mode and not investing in new features, open-source developer Enrico Weigelt has been one of the few still working to improve the X.Org Server. As part of his work besides pushing new patches and testing of the latest X.Org Server Git state, today he announced the release of the X.Org Testing Ground Toolkit v0.0.1 as a means to help in facilitate testing of the latest X.Org Server Git by making it easier to build it.

While on Linux the desktop environments, graphics stack, and other application software is steadily adopting Wayland support and focusing less on X11/X.Org support, the state of Wayland support and the open-source graphics driver stack in general is less robust among the BSDs. The NetBSD project published a status report around their ongoing dependence and modifications to their X.Org stack.

Longtime X.Org maintainer Alan Coopersmith with Oracle released a new version of xconsole, the program that displays an X11 window containing the messages sent to /dev/console. This xconsole 1.1 release comes 18 years after the xconsole 1.0 release.

For those trying to use the X.Org Server's GLAMOR accelerated 2D rendering on legacy/obsolete GPUs, there's now a fallback in place to allow software rendering to work when encountering crippled hardware.

One year in the making, NVIDIA's code for explicit GPU synchronization in XWayland along with the X.Org Server DRI3 and Present extensions has now been merged! This is a big culmination of all the recent work around Wayland explicit synchronization and notably takes care of a number of NVIDIA driver problems on Wayland in the process.

Last year the X.Org Server disabled byte-swapped clients by default over being a large and known attack surface within the X.Org/XWayland codebase. That's proven itself to further be the case with 3 of 4 new CVEs made public today being around the byte-swapped code.

The X.Org Foundation's elections for the Board of Directors have been delayed as there weren't enough participants nominated for the available seats to hold an election.

There are still no signs of a new X.Org Server feature release coming in the near-term with most of the major stakeholders divesting from the xorg-server besides the XWayland portion of the code-base. But for those interested in the past few days there have been some NetBSD/OpenBSD build fixes to the X.Org Server as well as clearing out some remnants of old compiler support.

It was in 2013 a security researcher called the X.Org Server security state "worse than it looks" and quite a disaster from the security/bug perspective for the aging codebase. A decade later there's still no shortage of security vulnerabilities being uncovered within the X.Org Server.

A change merged to the X.Org Server Git for the generic xf86-video-modesetting DDX driver is helping conserve some power consumption at least for Intel graphics by determining the optimal hardware cursor size.

The X.Org Server doesn't see much in the way of feature work these days with Red Hat and others divesting from classic X.Org/X11 sessions. But there continues to be new point releases of the X.Org Server and the XWayland code due to long-standing security issues within the X.Org codebase. New point releases were out last night due to two CVEs for bugs dating back to 2007 and 2009.

Red Hat has formally confirmed what many were thinking: Red Hat Enterprise Linux 10 will be doing away with X.Org Server support aside from XWayland.

Luc Verhaegen has announced the return of the Graphics DevRoom for FOSDEM 2024 taking place in early February in Brussels.