# x.org

Published articles for x.org.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## X.Org XCB Co-Creator Praises Wayland's Protocol Design

DevFeed: [X.Org XCB Co-Creator Praises Wayland's Protocol Design](<https://devfeed.tech/articles/x-org-xcb-co-creator-praises-wayland-s-protocol-design-104405.md>)

Original publisher: [Read original article](<https://www.phoronix.com/news/Jamey-Sharp-Praises-Wayland>)

Author: Michael Larabel

Published: 2026-10-28T12:54:28Z

Content type: news

Language: en

Sources: [Phoronix](<https://devfeed.tech/sources/phoronix.md>)

Topics: [Wayland](<https://devfeed.tech/topics/wayland.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [Software Engineering](<https://devfeed.tech/topics/software-engineering.md>)

Tags: [abstractions](<https://devfeed.tech/tags/abstractions.md>), [client](<https://devfeed.tech/tags/client.md>), [clients](<https://devfeed.tech/tags/clients.md>), [code](<https://devfeed.tech/tags/code.md>), [comparison](<https://devfeed.tech/tags/comparison.md>), [complexity](<https://devfeed.tech/tags/complexity.md>), [design](<https://devfeed.tech/tags/design.md>), [desktop-linux](<https://devfeed.tech/tags/desktop-linux.md>), [developer](<https://devfeed.tech/tags/developer.md>), [flexibility](<https://devfeed.tech/tags/flexibility.md>), [globals](<https://devfeed.tech/tags/globals.md>), [linux-benchmarking](<https://devfeed.tech/tags/linux-benchmarking.md>), [linux-hardware-benchmarks](<https://devfeed.tech/tags/linux-hardware-benchmarks.md>), [linux-hardware-reviews](<https://devfeed.tech/tags/linux-hardware-reviews.md>), [linux-how-to](<https://devfeed.tech/tags/linux-how-to.md>), [linux-performance](<https://devfeed.tech/tags/linux-performance.md>), [linux-server-benchmarks](<https://devfeed.tech/tags/linux-server-benchmarks.md>), [low-level](<https://devfeed.tech/tags/low-level.md>), [mastodon](<https://devfeed.tech/tags/mastodon.md>), [open-source-graphics](<https://devfeed.tech/tags/open-source-graphics.md>), [phoronix](<https://devfeed.tech/tags/phoronix.md>), [phoronix-test-suite](<https://devfeed.tech/tags/phoronix-test-suite.md>), [program](<https://devfeed.tech/tags/program.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [protocol-design](<https://devfeed.tech/tags/protocol-design.md>), [qt](<https://devfeed.tech/tags/qt.md>), [sharp](<https://devfeed.tech/tags/sharp.md>), [ubuntu-benchmarks](<https://devfeed.tech/tags/ubuntu-benchmarks.md>), [ubuntu-hardware](<https://devfeed.tech/tags/ubuntu-hardware.md>), [wayland](<https://devfeed.tech/tags/wayland.md>), [x](<https://devfeed.tech/tags/x.md>), [x-org](<https://devfeed.tech/tags/x-org.md>)

### AI overview

After writing his first Wayland client, XCB co-creator Jamey Sharp praised Wayland's protocol design, saying it reflects lessons from X and XCB. His Rust program opened a window, flashed it between white and black, and measured timing statistics; it exceeded 300 lines partly because he chose not to use wayland-client's helpers for binding globals. Sharp argues that this low-level complexity enables handling more complicated scenarios, while toolkits such as GTK, Qt, or SDL provide simpler interfaces for common tasks. He considers that a deliberate tradeoff favoring protocol flexibility over making basic operations easy.

### Source excerpt

Open-source developer Jamey Sharp who is a longtime X.Org developer and co-creator of the X protocol C-language Binding (XCB) finally had the need to write a Wayland client and ended up praising its design...

## ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

DevFeed: [ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability](<https://devfeed.tech/articles/zdi-26-763-x-org-server-xkb-xkbresizekeytype-numeric-truncation-privilege-escalation-vulnerability-91806.md>)

Original publisher: [Read original article](<http://www.zerodayinitiative.com/advisories/ZDI-26-763/>)

Published: 2026-10-15T05:00:00Z

Content type: news

Language: en

Sources: [Zero Day Initiative](<https://devfeed.tech/sources/zero-day-initiative.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>)

Tags: [privilege-escalation](<https://devfeed.tech/tags/privilege-escalation.md>), [x-org](<https://devfeed.tech/tags/x-org.md>)

### AI overview

A flaw in X.Org Server's handling of XkbSetMap requests can let a local attacker with low-privileged code execution escalate to root and execute arbitrary code. The issue is insufficient validation of user-supplied data, allowing numeric truncation before buffer allocation. X.Org has issued a fix; the excerpt points to commit 89101a6c6618. The advisory identifies CVE-2026-93518 and assigns CVSS 7.8.

### Source excerpt

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93518.