CVE catalog

CVE-2025-26595

X.Org X Server vulnerabilities

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.44% · Oct 25, 2026

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxwaylandsid2:24.1.14-1fixed
Debianxwaylandforky2:24.1.14-1fixed
Debianxwaylandtrixie2:24.1.6-1fixed
Debianxwaylandbookworm2:22.1.9-1vulnerable
Debianxorg-serversid2:21.1.25-2fixed
Debianxorg-serverforky2:21.1.25-2fixed
Debianxorg-servertrixie2:21.1.16-1.3+deb13u3fixed
Debianxorg-servertrixie-security2:21.1.16-1.3+deb13u4fixed
Debianxorg-serverbookworm2:21.1.7-3+deb12u12fixed
Debianxorg-serverbookworm-security2:21.1.7-3+deb12u13fixed
UbuntuxwaylandnobleNot reportedvulnerable
Ubuntuxorg-servernoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxwaylandnoble2:23.2.6-1ubuntu0.4fixed
Ubuntuxnestnoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxorg-server-sourcenoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxserver-commonnoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxserver-xephyrnoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxserver-xorg-corenoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxserver-xorg-devnoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxserver-xorg-legacynoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxvfbnoble2:21.1.12-1ubuntu1.2fixed
Ubuntuxorg-serverpro2:1.19.5-0ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu3vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.1vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.2vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.3vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.4vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.5vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.6vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.7vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.8vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.9vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.10vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.11vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.12vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.13vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.14vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm1vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm3vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm4vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm5vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm7vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm8vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm9vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm10vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm11vulnerable
Ubuntuxorg-serverpro2:1.19.6-1ubuntu4.15+esm12fixed
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.5-0ubuntu2~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm7vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm8vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm9fixed
Ubuntuxorg-server-hwe-18.04pro2:1.20.1-3ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.4-1ubuntu3~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.5+git20191008-0ubuntu1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.2vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.3vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.4vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.5vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.6vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.7vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.8vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.9vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.10vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm2vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm3vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm4fixed
Ubuntuxorg-server20.042:1.20.5+git20191008-0ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.6-1ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu1vulnerable
Ubuntuxorg-server20.042:1.20.7-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.1vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.2vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.3vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.4vulnerable
Ubuntuxorg-server20.042:1.20.8-2ubuntu2.6vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.1~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.1vulnerable
Ubuntuxorg-server20.042:1.20.9-2ubuntu1.2~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.11-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.3vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.4vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.5vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.6vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.8vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.9vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.12vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.14vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.15vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.16vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.17vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.18vulnerable
Ubuntuxorg-server20.042:1.20.13-1ubuntu1~20.04.19fixed
Ubuntuxorg-server22.042:1.20.13-1ubuntu1vulnerable
Ubuntuxorg-server22.042:1.20.13-1ubuntu2vulnerable
Ubuntuxorg-server22.042:1.20.14-1ubuntu1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.3vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.4vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.5vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.6vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.7vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.8vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.9vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.1vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.2vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.5vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.7vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.8vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.9vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.10vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.11vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.12vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.13fixed
Ubuntuxwayland22.042:21.1.2-0ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.3-1vulnerable
Ubuntuxwayland22.042:21.1.3-1ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.4-1vulnerable
Ubuntuxwayland22.042:22.1.0-1vulnerable
Ubuntuxwayland22.042:22.1.1-1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.2vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.3vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.4vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.5vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.6vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.7vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.9vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.10vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.11vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.12vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.13vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.14vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.15vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.17fixed
Ubuntuxorg-server24.042:21.1.7-3ubuntu2vulnerable
Ubuntuxorg-server24.042:21.1.7-3ubuntu2.1vulnerable
Ubuntuxorg-server24.042:21.1.10-1ubuntu1vulnerable
Ubuntuxorg-server24.042:21.1.11-2ubuntu1vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.1vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.2fixed
Ubuntuxwayland24.042:23.2.0-1vulnerable
Ubuntuxwayland24.042:23.2.0-1ubuntu0.1vulnerable
Ubuntuxwayland24.042:23.2.3-1vulnerable
Ubuntuxwayland24.042:23.2.4-1vulnerable
Ubuntuxwayland24.042:23.2.4-1build1vulnerable
Ubuntuxwayland24.042:23.2.4-1build2vulnerable
Ubuntuxwayland24.042:23.2.4-1build3vulnerable
Ubuntuxwayland24.042:23.2.6-1vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.1vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.2vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.4fixed
Ubuntuxorg-server25.102:21.1.16-1ubuntu1fixed
Suselibxkbfilelinux enterprise server 12 sp5-ltss1.0.8-12.3.1fixed
Suselibxkbfilelinux enterprise server ltss extended security 12 sp51.0.8-12.3.1fixed
Suselibxkbfilelinux enterprise module for basesystem 15 sp61.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise high performance computing 15 sp3-ltss1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise high performance computing 15 sp4-espos1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise high performance computing 15 sp4-ltss1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise high performance computing 15 sp5-espos1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise high performance computing 15 sp5-ltss1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise server 15 sp3-ltss1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise server 15 sp4-ltss1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise server 15 sp5-ltss1.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise server for sap applications 15 sp31.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise server for sap applications 15 sp41.0.9-150000.3.3.1fixed
Suselibxkbfilelinux enterprise server for sap applications 15 sp51.0.9-150000.3.3.1fixed
Suselibxkbfilemanager proxy 4.31.0.9-150000.3.3.1fixed
Suselibxkbfilemanager server 4.31.0.9-150000.3.3.1fixed
Suselibxkbfileenterprise storage 7.11.0.9-150000.3.3.1fixed
Opensuselibxkbfileleap 15.61.0.9-150000.3.3.1fixed
Opensuselibxkbfiletumbleweed1.1.3-2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxwaylandsourcesid2:24.1.6-1not yet assignedNot reported[1098907]
Debianxwaylandsourceforky2:24.1.6-1not yet assignedNot reported[1098907]
Debianxwaylandsourcetrixie2:24.1.6-1not yet assignedNot reported[1098907]
Debianxwaylandsourcebookworm(unfixed)not yet assignedNot reported[1098907]
Debianxorg-serversourcesid2:21.1.16-1not yet assignedNot reported[1098906]
Debianxorg-serversourceforky2:21.1.16-1not yet assignedNot reported[1098906]
Debianxorg-serversourcetrixie2:21.1.16-1not yet assignedNot reported[1098906]
Debianxorg-serversourcebookworm2:21.1.7-3+deb12u9not yet assignedNot reported[1098906]
Ubuntuxorg-serverdebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxwaylanddebnoble2:23.2.6-1ubuntu0.4Not reportedNot reportedNot reported
Ubuntuxnestdebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxorg-server-sourcedebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxserver-commondebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxserver-xephyrdebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxserver-xorg-coredebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxserver-xorg-devdebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxserver-xorg-legacydebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxvfbdebnoble2:21.1.12-1ubuntu1.2Not reportedNot reportedNot reported
Ubuntuxorg-serverdebpro2:1.19.6-1ubuntu4.15+esm12Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxorg-server-hwe-16.04debpro2:1.19.6-1ubuntu4.1~16.04.6+esm9Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxorg-server-hwe-18.04debpro2:1.20.8-2ubuntu2.2~18.04.11+esm4Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxorg-serverdeb20.042:1.20.13-1ubuntu1~20.04.19Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxorg-serverdeb22.042:21.1.4-2ubuntu1.7~22.04.13Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxwaylanddeb22.042:22.1.1-1ubuntu0.17Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxorg-serverdeb24.042:21.1.12-1ubuntu1.2Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxwaylanddeb24.042:23.2.6-1ubuntu0.4Not reportedUBUNTU-CVE-2025-26595Not reported
Ubuntuxorg-serverdeb25.102:21.1.16-1ubuntu1Not reportedUBUNTU-CVE-2025-26595Not reported
Suselibxkbfilerpmlinux enterprise server 12 sp5-ltss1.0.8-12.3.1Not reportedSUSE-SU-2025:0818-1Not reported
Suselibxkbfilerpmlinux enterprise server ltss extended security 12 sp51.0.8-12.3.1Not reportedSUSE-SU-2025:0818-1Not reported
Suselibxkbfilerpmlinux enterprise module for basesystem 15 sp61.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise high performance computing 15 sp3-ltss1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise high performance computing 15 sp4-espos1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise high performance computing 15 sp4-ltss1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise high performance computing 15 sp5-espos1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise high performance computing 15 sp5-ltss1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise server 15 sp3-ltss1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise server 15 sp4-ltss1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise server 15 sp5-ltss1.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise server for sap applications 15 sp31.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise server for sap applications 15 sp41.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmlinux enterprise server for sap applications 15 sp51.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmmanager proxy 4.31.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmmanager server 4.31.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Suselibxkbfilerpmenterprise storage 7.11.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Opensuselibxkbfilerpmleap 15.61.0.9-150000.3.3.1Not reportedSUSE-SU-2025:0758-1Not reported
Opensuselibxkbfilerpmtumbleweed1.1.3-2.1Not reportedOPENSUSE-SU-2025:14838-1Not reported

[Debian bug #1098907][Debian bug #1098906]

Notes

[bookworm] xwayland: Minor issue; Xwayland shouldn't be running as root

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [xwayland]Affected
    Details (2)

    • 2:22.1.9-1 · amd64 · bookworm

      Affected

      usn · xwayland · debian · bookworm; usn · xwayland · debian · 12

    • 2:22.1.9-1 · arm64 · bookworm

      Affected

      usn · xwayland · debian · bookworm; usn · xwayland · debian · 12

  • [xnest]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xorg-server-source]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xserver-common]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xserver-xephyr]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xserver-xorg-core]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xserver-xorg-dev]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xserver-xorg-legacy]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xvfb]Fixed

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u9

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

[openSUSE Tumbleweed]

  • [libxkbfile1]Unknown

    Source package: [libxkbfile]

    Details (1)

    • 1.2.0-1.5 · x86_64 · tumbleweed

      Unknown · Fixed: 1.1.3-2.1

      Version impact unknown

      usn · libxkbfile · opensuse · tumbleweed

  • [libxkbfile1-32bit]Unknown

    Source package: [libxkbfile]

    Details (1)

    • 1.2.0-1.5 · x86_64 · tumbleweed

      Unknown · Fixed: 1.1.3-2.1

      Version impact unknown

      usn · libxkbfile · opensuse · tumbleweed

  • [libxkbfile-devel]Unknown

    Source package: [libxkbfile]

    Details (1)

    • 1.2.0-1.5 · x86_64 · tumbleweed

      Unknown · Fixed: 1.1.3-2.1

      Version impact unknown

      usn · libxkbfile · opensuse · tumbleweed

  • [libxkbfile-devel-32bit]Unknown

    Source package: [libxkbfile]

    Details (1)

    • 1.2.0-1.5 · x86_64 · tumbleweed

      Unknown · Fixed: 1.1.3-2.1

      Version impact unknown

      usn · libxkbfile · opensuse · tumbleweed

[Debian 13 (Trixie)]

  • [xnest]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

  • [xorg-server-source]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

  • [xserver-common]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

  • [xserver-xephyr]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

  • [xserver-xorg-core]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

  • [xserver-xorg-dev]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

  • [xserver-xorg-legacy]Fixed

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1

      usn · xorg-server · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]