CVE catalog

CVE-2022-46340

xorg-server affected and fixed versions

[CVE catalog]

A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.68% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityxorg-server2:21.1.16-1.3+deb13u4Fixed[CVE-2022-46340]
Debiantrixiexorg-server2:21.1.16-1.3+deb13u3Fixed[CVE-2022-46340]
Debiantrixiexorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiantrixiexwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiantrixiexwayland2:24.1.6-1Fixed[CVE-2022-46340]
Debiansidxorg-server2:21.1.25-2Fixed[CVE-2022-46340]
Debiansidxorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiansidxwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiansidxwayland2:24.1.14-1Fixed[CVE-2022-46340]
Debianforkyxorg-server2:21.1.25-2Fixed[CVE-2022-46340]
Debianforkyxorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debianforkyxwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]

Showing 12 fix observations. All 161 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedxwayland2:22.1.6-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormxorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debianbookwormxorg-server2:21.1.7-3+deb12u12Fixed[CVE-2022-46340]
Debianbookwormxwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debianbookwormxwayland2:22.1.9-1Fixed[CVE-2022-46340]
Debianbookworm-securityxorg-server2:21.1.7-3+deb12u13Fixed[CVE-2022-46340]
Debianforkyxorg-server2:21.1.25-2Fixed[CVE-2022-46340]
Debianforkyxorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debianforkyxwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debianforkyxwayland2:24.1.14-1Fixed[CVE-2022-46340]
Debiansidxorg-server2:21.1.25-2Fixed[CVE-2022-46340]
Debiansidxorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiansidxwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiansidxwayland2:24.1.14-1Fixed[CVE-2022-46340]
Debiantrixiexorg-server2:21.1.16-1.3+deb13u3Fixed[CVE-2022-46340]
Debiantrixiexorg-server2:21.1.5-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiantrixiexwayland2:22.1.6-1FixedDistribution-reported fixed boundary[CVE-2022-46340]
Debiantrixiexwayland2:24.1.6-1Fixed[CVE-2022-46340]
Debiantrixie-securityxorg-server2:21.1.16-1.3+deb13u4Fixed[CVE-2022-46340]
Opensuseleap 15.4xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Opensuseleap 15.4xorg-x11-server1.20.3-150400.38.19.1UnknownSource applicability is not established[SUSE-SU-2023:0731-1]
Opensuseleap 15.4xwayland21.1.4-150400.3.12.1UnknownSource applicability is not established[SUSE-SU-2023:0654-1]
Suseenterprise storage 7xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suseenterprise storage 7.1xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise high performance computing 15 sp1-ltssxorg-x11-server1.20.3-150100.14.5.39.1UnknownSource applicability is not established[SUSE-SU-2023:0657-1]
Suselinux enterprise high performance computing 15 sp2-ltssxorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise high performance computing 15 sp3-esposxorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise high performance computing 15 sp3-ltssxorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise module for basesystem 15 sp4xorg-x11-server1.20.3-150400.38.19.1UnknownSource applicability is not established[SUSE-SU-2023:0731-1]
Suselinux enterprise module for development tools 15 sp4xorg-x11-server1.20.3-150400.38.19.1UnknownSource applicability is not established[SUSE-SU-2023:0731-1]
Suselinux enterprise real time 15 sp3xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise server 12 sp2-bclxorg-x11-server7.6_1.18.3-76.63.1UnknownSource applicability is not established[SUSE-SU-2023:0653-1]
Suselinux enterprise server 12 sp4-esposxorg-x11-server1.19.6-4.45.1UnknownSource applicability is not established[SUSE-SU-2023:0655-1]
Suselinux enterprise server 12 sp4-ltssxorg-x11-server1.19.6-4.45.1UnknownSource applicability is not established[SUSE-SU-2023:0655-1]
Suselinux enterprise server 12 sp5xorg-x11-server1.19.6-10.46.1UnknownSource applicability is not established[SUSE-SU-2023:0656-1]
Suselinux enterprise server 15 sp1-ltssxorg-x11-server1.20.3-150100.14.5.39.1UnknownSource applicability is not established[SUSE-SU-2023:0657-1]
Suselinux enterprise server 15 sp2-ltssxorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise server 15 sp3-ltssxorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise server for sap applications 12 sp4xorg-x11-server1.19.6-4.45.1UnknownSource applicability is not established[SUSE-SU-2023:0655-1]
Suselinux enterprise server for sap applications 12 sp5xorg-x11-server1.19.6-10.46.1UnknownSource applicability is not established[SUSE-SU-2023:0656-1]
Suselinux enterprise server for sap applications 15 sp1xorg-x11-server1.20.3-150100.14.5.39.1UnknownSource applicability is not established[SUSE-SU-2023:0657-1]
Suselinux enterprise server for sap applications 15 sp2xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise server for sap applications 15 sp3xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise software development kit 12 sp5xorg-x11-server1.19.6-10.46.1UnknownSource applicability is not established[SUSE-SU-2023:0656-1]
Suselinux enterprise workstation extension 15 sp4xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suselinux enterprise workstation extension 15 sp4xwayland21.1.4-150400.3.12.1UnknownSource applicability is not established[SUSE-SU-2023:0654-1]
Susemanager proxy 4.2xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Susemanager server 4.2xorg-x11-server1.20.3-150200.22.5.69.1UnknownSource applicability is not established[SUSE-SU-2023:0683-1]
Suseopenstack cloud 9xorg-x11-server1.19.6-4.45.1UnknownSource applicability is not established[SUSE-SU-2023:0655-1]
Suseopenstack cloud crowbar 9xorg-x11-server1.19.6-4.45.1UnknownSource applicability is not established[SUSE-SU-2023:0655-1]
Ubuntu18.04xorg-server2:1.19.5-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.10UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.11UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.12UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.13UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.5UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.6UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.7UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.8UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server2:1.19.6-1ubuntu4.9UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.1-3ubuntu2.1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.4-1ubuntu3~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.5+git20191008-0ubuntu1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.5UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.6UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.7UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.8UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu18.04xorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.9UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.11-1ubuntu1~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.13-1ubuntu1~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.13-1ubuntu1~20.04.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.13-1ubuntu1~20.04.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.13-1ubuntu1~20.04.5UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.5+git20191008-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.6-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.7-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.7-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.8-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.8-2ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.8-2ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.8-2ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.8-2ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.8-2ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.9-2ubuntu1.1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.9-2ubuntu1.2~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu20.04xorg-server2:1.20.9-2ubuntu1.2~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:1.20.13-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:1.20.13-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:1.20.14-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:21.1.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:21.1.3-1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:21.1.3-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:21.1.4-1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:22.1.0-1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:22.1.1-1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.17.2-1ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.17.2-1ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.17.3-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.17.3-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.17.3-2ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.17.3-2ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.1-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.1-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.3-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.3-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.3-1ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.3-1ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.10UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.11UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.12UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.12+esm1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.12+esm2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.12+esm4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.12+esm5UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.6UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.7UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.8UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server2:1.18.4-0ubuntu0.9UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.18.4-1ubuntu6.1~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.18.4-1ubuntu6.1~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.5-0ubuntu2~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.5UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm3UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm4UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2022-46340]
Original provider fields
{
  "package_releases": [
    {
      "name": "xwayland",
      "status": "fixed",
      "release": "sid",
      "version": "2:24.1.14-1"
    },
    {
      "name": "xwayland",
      "status": "fixed",
      "release": "forky",
      "version": "2:24.1.14-1"
    },
    {
      "name": "xwayland",
      "status": "fixed",
      "release": "trixie",
      "version": "2:24.1.6-1"
    },
    {
      "name": "xwayland",
      "status": "fixed",
      "release": "bookworm",
      "version": "2:22.1.9-1"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "sid",
      "version": "2:21.1.25-2"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "forky",
      "version": "2:21.1.25-2"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "trixie",
      "version": "2:21.1.16-1.3+deb13u3"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2:21.1.16-1.3+deb13u4"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "bookworm",
      "version": "2:21.1.7-3+deb12u12"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2:21.1.7-3+deb12u13"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2:22.1.6-1"
    },
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2:22.1.6-1"
    },
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2:22.1.6-1"
    },
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2:22.1.6-1"
    },
    {
      "bug": 1026071,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.5-1"
    },
    {
      "bug": 1026071,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.5-1"
    },
    {
      "bug": 1026071,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.5-1"
    },
    {
      "bug": 1026071,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.5-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "xwayland",
      "fixed_version": "2:22.1.6-1",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.18.4-0ubuntu0.12+esm5"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2:1.17.2-1ubuntu9",
        "2:1.17.2-1ubuntu10",
        "2:1.17.3-2ubuntu1",
        "2:1.17.3-2ubuntu2",
        "2:1.17.3-2ubuntu3",
        "2:1.17.3-2ubuntu4",
        "2:1.18.1-1ubuntu3",
        "2:1.18.1-1ubuntu4",
        "2:1.18.3-1ubuntu1",
        "2:1.18.3-1ubuntu2",
        "2:1.18.3-1ubuntu2.2",
        "2:1.18.3-1ubuntu2.3",
        "2:1.18.4-0ubuntu0.1",
        "2:1.18.4-0ubuntu0.2",
        "2:1.18.4-0ubuntu0.3",
        "2:1.18.4-0ubuntu0.4",
        "2:1.18.4-0ubuntu0.6",
        "2:1.18.4-0ubuntu0.7",
        "2:1.18.4-0ubuntu0.8",
        "2:1.18.4-0ubuntu0.9",
        "2:1.18.4-0ubuntu0.10",
        "2:1.18.4-0ubuntu0.11",
        "2:1.18.4-0ubuntu0.12",
        "2:1.18.4-0ubuntu0.12+esm1",
        "2:1.18.4-0ubuntu0.12+esm2",
        "2:1.18.4-0ubuntu0.12+esm4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:1.18.4-0ubuntu0.12+esm5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server-hwe-16.04",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.19.6-1ubuntu4.1~16.04.6+esm4"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2:1.18.4-1ubuntu6.1~16.04.1",
        "2:1.18.4-1ubuntu6.1~16.04.2",
        "2:1.19.3-1ubuntu1~16.04.2",
        "2:1.19.3-1ubuntu1~16.04.3",
        "2:1.19.3-1ubuntu1~16.04.4",
        "2:1.19.5-0ubuntu2~16.04.1",
        "2:1.19.6-1ubuntu4~16.04.1",
        "2:1.19.6-1ubuntu4.1~16.04.1",
        "2:1.19.6-1ubuntu4.1~16.04.2",
        "2:1.19.6-1ubuntu4.1~16.04.3",
        "2:1.19.6-1ubuntu4.1~16.04.4",
        "2:1.19.6-1ubuntu4.1~16.04.5",
        "2:1.19.6-1ubuntu4.1~16.04.6",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm1",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:1.19.6-1ubuntu4.1~16.04.6+esm4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.19.6-1ubuntu4.13"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2:1.19.5-0ubuntu2",
        "2:1.19.6-1ubuntu1",
        "2:1.19.6-1ubuntu2",
        "2:1.19.6-1ubuntu3",
        "2:1.19.6-1ubuntu4",
        "2:1.19.6-1ubuntu4.1",
        "2:1.19.6-1ubuntu4.2",
        "2:1.19.6-1ubuntu4.3",
        "2:1.19.6-1ubuntu4.4",
        "2:1.19.6-1ubuntu4.5",
        "2:1.19.6-1ubuntu4.6",
        "2:1.19.6-1ubuntu4.7",
        "2:1.19.6-1ubuntu4.8",
        "2:1.19.6-1ubuntu4.9",
        "2:1.19.6-1ubuntu4.10",
        "2:1.19.6-1ubuntu4.11",
        "2:1.19.6-1ubuntu4.12"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:1.19.6-1ubuntu4.13",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server-hwe-18.04",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.20.8-2ubuntu2.2~18.04.9"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2:1.20.1-3ubuntu2.1~18.04.1",
        "2:1.20.4-1ubuntu3~18.04.1",
        "2:1.20.5+git20191008-0ubuntu1~18.04.1",
        "2:1.20.8-2ubuntu2.1~18.04.1",
        "2:1.20.8-2ubuntu2.2~18.04.1",
        "2:1.20.8-2ubuntu2.2~18.04.2",
        "2:1.20.8-2ubuntu2.2~18.04.3",
        "2:1.20.8-2ubuntu2.2~18.04.4",
        "2:1.20.8-2ubuntu2.2~18.04.5",
        "2:1.20.8-2ubuntu2.2~18.04.6",
        "2:1.20.8-2ubuntu2.2~18.04.7",
        "2:1.20.8-2ubuntu2.2~18.04.8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:1.20.8-2ubuntu2.2~18.04.9",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:1.20.13-1ubuntu1~20.04.5"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2:1.20.5+git20191008-0ubuntu1",
        "2:1.20.6-1ubuntu1",
        "2:1.20.7-2ubuntu1",
        "2:1.20.7-2ubuntu2",
        "2:1.20.8-2ubuntu2",
        "2:1.20.8-2ubuntu2.1",
        "2:1.20.8-2ubuntu2.2",
        "2:1.20.8-2ubuntu2.3",
        "2:1.20.8-2ubuntu2.4",
        "2:1.20.8-2ubuntu2.6",
        "2:1.20.9-2ubuntu1.1~20.04.1",
        "2:1.20.9-2ubuntu1.2~20.04.1",
        "2:1.20.9-2ubuntu1.2~20.04.2",
        "2:1.20.11-1ubuntu1~20.04.2",
        "2:1.20.13-1ubuntu1~20.04.2",
        "2:1.20.13-1ubuntu1~20.04.3",
        "2:1.20.13-1ubuntu1~20.04.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:1.20.13-1ubuntu1~20.04.5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:21.1.3-2ubuntu2.5"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2:1.20.13-1ubuntu1",
        "2:1.20.13-1ubuntu2",
        "2:1.20.14-1ubuntu1",
        "2:21.1.3-2ubuntu2",
        "2:21.1.3-2ubuntu2.1",
        "2:21.1.3-2ubuntu2.2",
        "2:21.1.3-2ubuntu2.3",
        "2:21.1.3-2ubuntu2.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:21.1.3-2ubuntu2.5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:22.1.1-1ubuntu0.4"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2:21.1.2-0ubuntu1",
        "2:21.1.3-1",
        "2:21.1.3-1ubuntu1",
        "2:21.1.4-1",
        "2:22.1.0-1",
        "2:22.1.1-1",
        "2:22.1.1-1ubuntu0.1",
        "2:22.1.1-1ubuntu0.2",
        "2:22.1.1-1ubuntu0.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-46340",
      "fixed_version": "2:22.1.1-1ubuntu0.4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-46340",
      "provider_updated_at": "2026-04-22T13:31:11.782880Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-4.45.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0655-1",
      "fixed_version": "1.19.6-4.45.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0655-1",
      "provider_updated_at": "2026-02-04T04:31:07.302067Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-4.45.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0655-1",
      "fixed_version": "1.19.6-4.45.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0655-1",
      "provider_updated_at": "2026-02-04T04:31:07.302067Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-4.45.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0655-1",
      "fixed_version": "1.19.6-4.45.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0655-1",
      "provider_updated_at": "2026-02-04T04:31:07.302067Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-4.45.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0655-1",
      "fixed_version": "1.19.6-4.45.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0655-1",
      "provider_updated_at": "2026-02-04T04:31:07.302067Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-4.45.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0655-1",
      "fixed_version": "1.19.6-4.45.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0655-1",
      "provider_updated_at": "2026-02-04T04:31:07.302067Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "21.1.4-150400.3.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0654-1",
      "fixed_version": "21.1.4-150400.3.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0654-1",
      "provider_updated_at": "2026-02-04T04:05:48.887156Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "21.1.4-150400.3.12.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0654-1",
      "fixed_version": "21.1.4-150400.3.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0654-1",
      "provider_updated_at": "2026-02-04T04:05:48.887156Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150400.38.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0731-1",
      "fixed_version": "1.20.3-150400.38.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0731-1",
      "provider_updated_at": "2026-02-04T03:53:37.030980Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150400.38.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for development tools 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0731-1",
      "fixed_version": "1.20.3-150400.38.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0731-1",
      "provider_updated_at": "2026-02-04T03:53:37.030980Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150400.38.19.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0731-1",
      "fixed_version": "1.20.3-150400.38.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0731-1",
      "provider_updated_at": "2026-02-04T03:53:37.030980Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150100.14.5.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0657-1",
      "fixed_version": "1.20.3-150100.14.5.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0657-1",
      "provider_updated_at": "2026-02-04T03:37:52.222408Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150100.14.5.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0657-1",
      "fixed_version": "1.20.3-150100.14.5.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0657-1",
      "provider_updated_at": "2026-02-04T03:37:52.222408Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150100.14.5.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0657-1",
      "fixed_version": "1.20.3-150100.14.5.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0657-1",
      "provider_updated_at": "2026-02-04T03:37:52.222408Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-10.46.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0656-1",
      "fixed_version": "1.19.6-10.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0656-1",
      "provider_updated_at": "2026-02-04T03:35:52.346962Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-10.46.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0656-1",
      "fixed_version": "1.19.6-10.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0656-1",
      "provider_updated_at": "2026-02-04T03:35:52.346962Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.19.6-10.46.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0656-1",
      "fixed_version": "1.19.6-10.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0656-1",
      "provider_updated_at": "2026-02-04T03:35:52.346962Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise real time 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "manager server 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.20.3-150200.22.5.69.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0683-1",
      "fixed_version": "1.20.3-150200.22.5.69.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0683-1",
      "provider_updated_at": "2026-02-04T03:24:00.917424Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-x11-server",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.6_1.18.3-76.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0653-1",
      "fixed_version": "7.6_1.18.3-76.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0653-1",
      "provider_updated_at": "2026-02-04T02:41:34.663640Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1026071]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xorg-server-source]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xserver-common]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xserver-xephyr]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xserver-xorg-core]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xserver-xorg-dev]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xserver-xorg-legacy]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.5-1

      dsa · xorg-server · debian · bookworm

  • [xwayland]Unknown
    Details (2)

    • 2:22.1.9-1 · amd64 · bookworm

      Fixed · Fixed: 2:22.1.6-1

      dsa · xwayland · debian · bookworm

    • 2:22.1.9-1 · arm64 · bookworm

      Fixed · Fixed: 2:22.1.6-1

      dsa · xwayland · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]