Back Linuxsecurity

Fedora 43 Xwayland 24.1.10 Critical CVE Fixes 2026

Linuxsecurity •LinuxSecurity Advisories • April 22, 2026

Xwayland is an X server for running X clients under Wayland. Update Information : Update to xwayland 24.1.10, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003

Xwayland is an X server for running X clients under Wayland.

Update to xwayland 24.1.10, CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003

* Tue Apr 14 2026 Olivier Fourdan - 24.1.10-1 - Update to xwayland 24.1.10 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 * Sat Jan 17 2026 Fedora Release Engineering - 24.1.9-2 - Rebuilt for

[ 1 ] Bug #2458206 - xorg-x11-server-Xwayland-24.1.10 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-beff97a194' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVEs Affect Fedora Xwayland and X.Org X11 Server On April 14, 2026, critical updates were released for Fedora 43's Xwayland and Fedora 42's X.Org X11 server, addressing multiple vulnerabilities. The updates include fixes for CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, and CVE-2026-34003, all published on April 23, 2026. These vulnerabilities could potentially allow attackers to exploit the X server environments, affecting users running Fedora distributions. The updates can be installed using the 'dnf' package manager. Security professionals are advised to apply these updates promptly to mitigate risks associated with these vulnerabilities. The affected software versions include Xwayland 24.1.10 and xserver 21.1.22. The scope of impact includes all users of the affected Fedora versions. Current status indicates that the vulnerabilities are patched, but users must ensure they update their systems. 3 sources 58

Extracted Entities

CVEs (5)

CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003

Platforms (2)

Wayland Xwayland