Xorg server and Xwayland had updates for security on 28th of October

Support
1

So on October 28th there were updates for xorg server and Xwayland for security.
There hasn’t been any updates on Stable yet for those vulnerabilities.

Just asking what is the situation here? Would like to see faster updates for security.

Link to Phoronix article.

2

Switch branch if you are that concerned

sudo pacman-mirrors -aS unstable
sudo pacman -Syyu

2025-11-26T12:12:00Z

 $ mbn info xorg-server -q
Branch         : archlinux
Name           : xorg-server
Version        : 21.1.20-1
Repository     : extra
Build Date     : Tue 28 Oct 2025 19:41:27 
Packager       : T.J. Townsend <blakkheim@archlinux.org>
Branch         : unstable
Name           : xorg-server
Version        : 21.1.21-1
Repository     : extra
Build Date     : Tue 25 Nov 2025 15:53:40 
Packager       : Philip Mueller <philm@manjaro.org>
Branch         : testing
Name           : xorg-server
Version        : 21.1.20-2
Repository     : extra
Build Date     : Sat 22 Nov 2025 18:36:06 
Packager       : Mark Wagie <mark@manjaro.org>
Branch         : stable
Name           : xorg-server
Version        : 21.1.18-2
Repository     : extra
Build Date     : Tue 24 Jun 2025 20:30:37 
Packager       : Mark Wagie <mark@manjaro.org>

 $ mbn info xorg-xwayland -q
Branch         : archlinux
Name           : xorg-xwayland
Version        : 24.1.9-1
Repository     : extra
Build Date     : Tue 28 Oct 2025 15:38:25 
Packager       : Christian Hesse <eworm@archlinux.org>
Branch         : unstable
Name           : xorg-xwayland
Version        : 24.1.9-1
Repository     : extra
Build Date     : Tue 28 Oct 2025 15:38:25 
Packager       : Christian Hesse <eworm@archlinux.org>
Branch         : testing
Name           : xorg-xwayland
Version        : 24.1.9-1
Repository     : extra
Build Date     : Tue 28 Oct 2025 15:38:25 
Packager       : Christian Hesse <eworm@archlinux.org>
Branch         : stable
Name           : xorg-xwayland
Version        : 24.1.8-1
Repository     : extra
Build Date     : Wed 18 Jun 2025 19:07:45 
Packager       : Andreas Radke <andyrtr@archlinux.org>
3

Anyone have any idea if those vulnerabilities are done with remote access or is it just local? I would be fine if just local. Would really want to stick to stable branch still.

E: searched for those and found out that all are local so i think im gonna stick to stable still.

4

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.