CVE catalog

CVE-2025-62230

X.Org X Server vulnerabilities

[CVE catalog]

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityxorg-server2:21.1.16-1.3+deb13u4Fixed[CVE-2025-62230]
Debiantrixiexorg-server2:21.1.16-1.3+deb13u1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debiantrixiexorg-server2:21.1.16-1.3+deb13u3Fixed[CVE-2025-62230]
Debiansidxorg-server2:21.1.20-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debiansidxorg-server2:21.1.25-2Fixed[CVE-2025-62230]
Debiansidxwayland2:24.1.14-1Fixed[CVE-2025-62230]
Debiansidxwayland2:24.1.9-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debianforkyxorg-server2:21.1.20-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debianforkyxorg-server2:21.1.25-2Fixed[CVE-2025-62230]
Debianforkyxwayland2:24.1.14-1Fixed[CVE-2025-62230]
Debianforkyxwayland2:24.1.9-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debianbookworm-securityxorg-server2:21.1.7-3+deb12u13Fixed[CVE-2025-62230]

Showing 12 fix observations. All 186 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedxnest2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxorg-server2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxorg-server-source2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxserver-common2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxserver-xephyr2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxserver-xorg-core2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxserver-xorg-dev2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxserver-xorg-legacy2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxvfb2:21.1.12-1ubuntu1.5UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxwaylandNot reportedUnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedxwayland2:23.2.6-1ubuntu0.7UnknownSource applicability is not establishedProvider not reported
Debianbookwormxorg-server2:21.1.7-3+deb12u11FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debianbookwormxorg-server2:21.1.7-3+deb12u12Fixed[CVE-2025-62230]
DebianbookwormxwaylandNot reportedAffectedDistribution reports no fix[CVE-2025-62230]
Debianbookwormxwayland2:22.1.9-1Affected[CVE-2025-62230]
Debianbookworm-securityxorg-server2:21.1.7-3+deb12u13Fixed[CVE-2025-62230]
Debianforkyxorg-server2:21.1.20-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debianforkyxorg-server2:21.1.25-2Fixed[CVE-2025-62230]
Debianforkyxwayland2:24.1.14-1Fixed[CVE-2025-62230]
Debianforkyxwayland2:24.1.9-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debiansidxorg-server2:21.1.20-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debiansidxorg-server2:21.1.25-2Fixed[CVE-2025-62230]
Debiansidxwayland2:24.1.14-1Fixed[CVE-2025-62230]
Debiansidxwayland2:24.1.9-1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debiantrixiexorg-server2:21.1.16-1.3+deb13u1FixedDistribution-reported fixed boundary[CVE-2025-62230]
Debiantrixiexorg-server2:21.1.16-1.3+deb13u3Fixed[CVE-2025-62230]
DebiantrixiexwaylandNot reportedAffectedDistribution reports no fix[CVE-2025-62230]
Debiantrixiexwayland2:24.1.6-1Affected[CVE-2025-62230]
Debiantrixie-securityxorg-server2:21.1.16-1.3+deb13u4Fixed[CVE-2025-62230]
Ubuntu22.04xorg-server2:1.20.13-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:1.20.13-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:1.20.14-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.7UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.8UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.3-2ubuntu2.9UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.10UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.11UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.12UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.13UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.14UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.15UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.16UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.7UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.8UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xorg-server2:21.1.4-2ubuntu1.7~22.04.9UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:21.1.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:21.1.3-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:21.1.3-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:21.1.4-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.10UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.11UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.12UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.13UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.14UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.15UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.17UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.18UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.19UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.20UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.7UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu22.04xwayland2:22.1.1-1ubuntu0.9UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.10-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.11-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.12-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.12-1ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.12-1ubuntu1.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.12-1ubuntu1.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.12-1ubuntu1.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.12-1ubuntu1.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.7-3ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xorg-server2:21.1.7-3ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.0-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.3-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.4-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.4-1build1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.4-1build2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.4-1build3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1ubuntu0.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1ubuntu0.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1ubuntu0.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu24.04xwayland2:23.2.6-1ubuntu0.7UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu25.10xorg-server2:21.1.16-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu25.10xorg-server2:21.1.18-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu25.10xorg-server2:21.1.18-1ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu25.10xwayland2:24.1.6-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu25.10xwayland2:24.1.6-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu25.10xwayland2:24.1.6-1ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu26.04xorg-server2:21.1.18-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu26.04xorg-server2:21.1.21-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu26.04xwayland2:24.1.6-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu26.04xwayland2:24.1.8-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntu26.04xwayland2:24.1.9-1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.11-1ubuntu1~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.12UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.14UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.15UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.16UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.17UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.18UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.19UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.20UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.20+esm1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.8UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.13-1ubuntu1~20.04.9UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.5+git20191008-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.6-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.7-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.7-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.8-2ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.8-2ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.8-2ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.8-2ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.8-2ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.8-2ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.9-2ubuntu1.1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.9-2ubuntu1.2~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server2:1.20.9-2ubuntu1.2~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.18.4-1ubuntu6.1~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.18.4-1ubuntu6.1~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.5-0ubuntu2~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm10UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm7UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm8UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4.1~16.04.6+esm9UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-16.042:1.19.6-1ubuntu4~16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.1-3ubuntu2.1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.4-1ubuntu3~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.5+git20191008-0ubuntu1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.1~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.10UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.11UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.11+esm1UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.11+esm2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.11+esm3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.11+esm4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.11+esm5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.4UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.5UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.6UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.7UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.8UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Ubuntuproxorg-server-hwe-18.042:1.20.8-2ubuntu2.2~18.04.9UnknownSource applicability is not established[UBUNTU-CVE-2025-62230]
Original provider fields
{
  "package_releases": [
    {
      "name": "xwayland",
      "status": "fixed",
      "release": "sid",
      "version": "2:24.1.14-1"
    },
    {
      "name": "xwayland",
      "status": "fixed",
      "release": "forky",
      "version": "2:24.1.14-1"
    },
    {
      "name": "xwayland",
      "status": "vulnerable",
      "release": "trixie",
      "version": "2:24.1.6-1"
    },
    {
      "name": "xwayland",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "2:22.1.9-1"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "sid",
      "version": "2:21.1.25-2"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "forky",
      "version": "2:21.1.25-2"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "trixie",
      "version": "2:21.1.16-1.3+deb13u3"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2:21.1.16-1.3+deb13u4"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "bookworm",
      "version": "2:21.1.7-3+deb12u12"
    },
    {
      "name": "xorg-server",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2:21.1.7-3+deb12u13"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2:24.1.9-1"
    },
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2:24.1.9-1"
    },
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "xwayland",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.20-1"
    },
    {
      "bug": null,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.20-1"
    },
    {
      "bug": null,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.16-1.3+deb13u1"
    },
    {
      "bug": null,
      "name": "xorg-server",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2:21.1.7-3+deb12u11"
    }
  ],
  "distribution_packages": [
    {
      "name": "xwayland",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "fixed_version": "2:23.2.6-1ubuntu0.7",
      "applicability_unknown": true
    },
    {
      "name": "xnest",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server-source",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xserver-common",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xserver-xephyr",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xserver-xorg-core",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xserver-xorg-dev",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xserver-xorg-legacy",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xvfb",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2:1.20.5+git20191008-0ubuntu1",
        "2:1.20.6-1ubuntu1",
        "2:1.20.7-2ubuntu1",
        "2:1.20.7-2ubuntu2",
        "2:1.20.8-2ubuntu2",
        "2:1.20.8-2ubuntu2.1",
        "2:1.20.8-2ubuntu2.2",
        "2:1.20.8-2ubuntu2.3",
        "2:1.20.8-2ubuntu2.4",
        "2:1.20.8-2ubuntu2.6",
        "2:1.20.9-2ubuntu1.1~20.04.1",
        "2:1.20.9-2ubuntu1.2~20.04.1",
        "2:1.20.9-2ubuntu1.2~20.04.2",
        "2:1.20.11-1ubuntu1~20.04.2",
        "2:1.20.13-1ubuntu1~20.04.2",
        "2:1.20.13-1ubuntu1~20.04.3",
        "2:1.20.13-1ubuntu1~20.04.4",
        "2:1.20.13-1ubuntu1~20.04.5",
        "2:1.20.13-1ubuntu1~20.04.6",
        "2:1.20.13-1ubuntu1~20.04.8",
        "2:1.20.13-1ubuntu1~20.04.9",
        "2:1.20.13-1ubuntu1~20.04.12",
        "2:1.20.13-1ubuntu1~20.04.14",
        "2:1.20.13-1ubuntu1~20.04.15",
        "2:1.20.13-1ubuntu1~20.04.16",
        "2:1.20.13-1ubuntu1~20.04.17",
        "2:1.20.13-1ubuntu1~20.04.18",
        "2:1.20.13-1ubuntu1~20.04.19",
        "2:1.20.13-1ubuntu1~20.04.20",
        "2:1.20.13-1ubuntu1~20.04.20+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server-hwe-16.04",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2:1.18.4-1ubuntu6.1~16.04.1",
        "2:1.18.4-1ubuntu6.1~16.04.2",
        "2:1.19.3-1ubuntu1~16.04.2",
        "2:1.19.3-1ubuntu1~16.04.3",
        "2:1.19.3-1ubuntu1~16.04.4",
        "2:1.19.5-0ubuntu2~16.04.1",
        "2:1.19.6-1ubuntu4~16.04.1",
        "2:1.19.6-1ubuntu4.1~16.04.1",
        "2:1.19.6-1ubuntu4.1~16.04.2",
        "2:1.19.6-1ubuntu4.1~16.04.3",
        "2:1.19.6-1ubuntu4.1~16.04.4",
        "2:1.19.6-1ubuntu4.1~16.04.5",
        "2:1.19.6-1ubuntu4.1~16.04.6",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm1",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm3",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm4",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm5",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm6",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm7",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm8",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm9",
        "2:1.19.6-1ubuntu4.1~16.04.6+esm10"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server-hwe-18.04",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2:1.20.1-3ubuntu2.1~18.04.1",
        "2:1.20.4-1ubuntu3~18.04.1",
        "2:1.20.5+git20191008-0ubuntu1~18.04.1",
        "2:1.20.8-2ubuntu2.1~18.04.1",
        "2:1.20.8-2ubuntu2.2~18.04.1",
        "2:1.20.8-2ubuntu2.2~18.04.2",
        "2:1.20.8-2ubuntu2.2~18.04.3",
        "2:1.20.8-2ubuntu2.2~18.04.4",
        "2:1.20.8-2ubuntu2.2~18.04.5",
        "2:1.20.8-2ubuntu2.2~18.04.6",
        "2:1.20.8-2ubuntu2.2~18.04.7",
        "2:1.20.8-2ubuntu2.2~18.04.8",
        "2:1.20.8-2ubuntu2.2~18.04.9",
        "2:1.20.8-2ubuntu2.2~18.04.10",
        "2:1.20.8-2ubuntu2.2~18.04.11",
        "2:1.20.8-2ubuntu2.2~18.04.11+esm1",
        "2:1.20.8-2ubuntu2.2~18.04.11+esm2",
        "2:1.20.8-2ubuntu2.2~18.04.11+esm3",
        "2:1.20.8-2ubuntu2.2~18.04.11+esm4",
        "2:1.20.8-2ubuntu2.2~18.04.11+esm5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:21.1.4-2ubuntu1.7~22.04.16"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2:1.20.13-1ubuntu1",
        "2:1.20.13-1ubuntu2",
        "2:1.20.14-1ubuntu1",
        "2:21.1.3-2ubuntu2",
        "2:21.1.3-2ubuntu2.1",
        "2:21.1.3-2ubuntu2.2",
        "2:21.1.3-2ubuntu2.3",
        "2:21.1.3-2ubuntu2.4",
        "2:21.1.3-2ubuntu2.5",
        "2:21.1.3-2ubuntu2.6",
        "2:21.1.3-2ubuntu2.7",
        "2:21.1.3-2ubuntu2.8",
        "2:21.1.3-2ubuntu2.9",
        "2:21.1.4-2ubuntu1.7~22.04.1",
        "2:21.1.4-2ubuntu1.7~22.04.2",
        "2:21.1.4-2ubuntu1.7~22.04.5",
        "2:21.1.4-2ubuntu1.7~22.04.7",
        "2:21.1.4-2ubuntu1.7~22.04.8",
        "2:21.1.4-2ubuntu1.7~22.04.9",
        "2:21.1.4-2ubuntu1.7~22.04.10",
        "2:21.1.4-2ubuntu1.7~22.04.11",
        "2:21.1.4-2ubuntu1.7~22.04.12",
        "2:21.1.4-2ubuntu1.7~22.04.13",
        "2:21.1.4-2ubuntu1.7~22.04.14",
        "2:21.1.4-2ubuntu1.7~22.04.15"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:21.1.4-2ubuntu1.7~22.04.16",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:22.1.1-1ubuntu0.20"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2:21.1.2-0ubuntu1",
        "2:21.1.3-1",
        "2:21.1.3-1ubuntu1",
        "2:21.1.4-1",
        "2:22.1.0-1",
        "2:22.1.1-1",
        "2:22.1.1-1ubuntu0.1",
        "2:22.1.1-1ubuntu0.2",
        "2:22.1.1-1ubuntu0.3",
        "2:22.1.1-1ubuntu0.4",
        "2:22.1.1-1ubuntu0.5",
        "2:22.1.1-1ubuntu0.6",
        "2:22.1.1-1ubuntu0.7",
        "2:22.1.1-1ubuntu0.9",
        "2:22.1.1-1ubuntu0.10",
        "2:22.1.1-1ubuntu0.11",
        "2:22.1.1-1ubuntu0.12",
        "2:22.1.1-1ubuntu0.13",
        "2:22.1.1-1ubuntu0.14",
        "2:22.1.1-1ubuntu0.15",
        "2:22.1.1-1ubuntu0.17",
        "2:22.1.1-1ubuntu0.18",
        "2:22.1.1-1ubuntu0.19"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:22.1.1-1ubuntu0.20",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:21.1.12-1ubuntu1.5"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "2:21.1.7-3ubuntu2",
        "2:21.1.7-3ubuntu2.1",
        "2:21.1.10-1ubuntu1",
        "2:21.1.11-2ubuntu1",
        "2:21.1.12-1ubuntu1",
        "2:21.1.12-1ubuntu1.1",
        "2:21.1.12-1ubuntu1.2",
        "2:21.1.12-1ubuntu1.3",
        "2:21.1.12-1ubuntu1.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:21.1.12-1ubuntu1.5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:23.2.6-1ubuntu0.7"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "2:23.2.0-1",
        "2:23.2.0-1ubuntu0.1",
        "2:23.2.3-1",
        "2:23.2.4-1",
        "2:23.2.4-1build1",
        "2:23.2.4-1build2",
        "2:23.2.4-1build3",
        "2:23.2.6-1",
        "2:23.2.6-1ubuntu0.1",
        "2:23.2.6-1ubuntu0.2",
        "2:23.2.6-1ubuntu0.4",
        "2:23.2.6-1ubuntu0.5",
        "2:23.2.6-1ubuntu0.6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:23.2.6-1ubuntu0.7",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:21.1.18-1ubuntu1.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "2:21.1.16-1ubuntu1",
        "2:21.1.18-1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:21.1.18-1ubuntu1.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:24.1.6-1ubuntu1.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "2:24.1.6-1",
        "2:24.1.6-1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:24.1.6-1ubuntu1.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xorg-server",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:21.1.21-1ubuntu1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "2:21.1.18-1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:21.1.21-1ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    },
    {
      "name": "xwayland",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:24.1.9-1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "2:24.1.6-1ubuntu1",
        "2:24.1.8-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-62230",
      "fixed_version": "2:24.1.9-1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-62230",
      "provider_updated_at": "2026-05-20T16:23:41.175886068Z",
      "applicability_unknown": true
    }
  ]
}

Publisher notes

[trixie] xwayland: Minor issue; Xwayland shouldn't be running as root [bookworm] xwayland: Minor issue; Xwayland shouldn't be running as root

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (4)
    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 2:21.1.7-3+deb12u11

      usn · xorg-server · debian · bookworm; usn · xorg-server · debian · 12

  • [xwayland]Unknown
    Details (2)
    • 2:22.1.9-1 · amd64 · bookworm

      Affected

      usn · xwayland · debian · bookworm; usn · xwayland · debian · 12

    • 2:22.1.9-1 · arm64 · bookworm

      Affected

      usn · xwayland · debian · bookworm; usn · xwayland · debian · 12

[Debian 13 (Trixie)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (5)
    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u1

      usn · xorg-server · debian · 13

  • [xwayland]Unknown
    Details (2)
    • 2:24.1.6-1 · amd64 · trixie

      Affected

      usn · xwayland · debian · 13

    • 2:24.1.6-1 · arm64 · trixie

      Affected

      usn · xwayland · debian · 13

Observed:

References