CVE catalog

CVE-2026-55999

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing gly

[CVE catalog]

Severity
High · CVSS 8.5
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 23, 2026

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxwaylandsid2:24.1.14-1fixed
Debianxwaylandforky2:24.1.14-1fixed
Debianxwaylandtrixie2:24.1.6-1vulnerable
Debianxwaylandbookworm2:22.1.9-1vulnerable
Debianxorg-serversid2:21.1.25-2fixed
Debianxorg-serverforky2:21.1.25-2fixed
Debianxorg-servertrixie2:21.1.16-1.3+deb13u3vulnerable
Debianxorg-servertrixie-security2:21.1.16-1.3+deb13u4fixed
Debianxorg-serverbookworm2:21.1.7-3+deb12u12vulnerable
Debianxorg-serverbookworm-security2:21.1.7-3+deb12u13vulnerable
Cpexorg-serverNot reportedNot reportedvulnerable
CpexwaylandNot reportedNot reportedvulnerable
Cpex_serverNot reported21.2.24fixed
CpexwaylandNot reported24.1.13fixed
Susexwaylandlinux enterprise server 16.024.1.6-160000.6.1fixed
Susexwaylandlinux enterprise server for sap applications 16.024.1.6-160000.6.1fixed
Opensusexwaylandleap 16.024.1.6-160000.6.1fixed
Opensusexorg-x11-serverleap 16.021.1.15-160000.6.1fixed
Opensusexorg-x11-servertumbleweed21.1.21-8.1fixed
Opensusexwaylandtumbleweed24.1.12-1.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp4-espos1.20.3-150400.38.74.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp4-ltss1.20.3-150400.38.74.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp4-ltss1.20.3-150400.38.74.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp41.20.3-150400.38.74.1fixed
Susexorg-x11-serverlinux enterprise module for basesystem 15 sp721.1.15-150700.5.22.1fixed
Susexorg-x11-serverlinux enterprise module for development tools 15 sp721.1.15-150700.5.22.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp5-espos21.1.4-150500.7.52.1fixed
Susexorg-x11-serverlinux enterprise high performance computing 15 sp5-ltss21.1.4-150500.7.52.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp5-ltss21.1.4-150500.7.52.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp521.1.4-150500.7.52.1fixed
Susexwaylandlinux enterprise workstation extension 15 sp724.1.5-150700.3.22.1fixed
Susexorg-x11-serverlinux enterprise server 15 sp6-ltss21.1.11-150600.5.31.1fixed
Susexorg-x11-serverlinux enterprise server for sap applications 15 sp621.1.11-150600.5.31.1fixed
Susexorg-x11-serverlinux enterprise server 12 sp5-ltss1.19.6-10.105.1fixed
Susexorg-x11-serverlinux enterprise server ltss extended security 12 sp51.19.6-10.105.1fixed
Ubuntuxorg-serverpro2:1.20.5+git20191008-0ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.20.6-1ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.20.7-2ubuntu1vulnerable
Ubuntuxorg-serverpro2:1.20.7-2ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.20.8-2ubuntu2vulnerable
Ubuntuxorg-serverpro2:1.20.8-2ubuntu2.1vulnerable
Ubuntuxorg-serverpro2:1.20.8-2ubuntu2.2vulnerable
Ubuntuxorg-serverpro2:1.20.8-2ubuntu2.3vulnerable
Ubuntuxorg-serverpro2:1.20.8-2ubuntu2.4vulnerable
Ubuntuxorg-serverpro2:1.20.8-2ubuntu2.6vulnerable
Ubuntuxorg-serverpro2:1.20.9-2ubuntu1.1~20.04.1vulnerable
Ubuntuxorg-serverpro2:1.20.9-2ubuntu1.2~20.04.1vulnerable
Ubuntuxorg-serverpro2:1.20.9-2ubuntu1.2~20.04.2vulnerable
Ubuntuxorg-serverpro2:1.20.11-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.2vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.3vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.4vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.5vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.6vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.8vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.9vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.12vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.14vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.15vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.16vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.17vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.18vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.19vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.20vulnerable
Ubuntuxorg-serverpro2:1.20.13-1ubuntu1~20.04.20+esm1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.18.4-1ubuntu6.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.3-1ubuntu1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.5-0ubuntu2~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.2vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm1vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm3vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm4vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm5vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm6vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm7vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm8vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm9vulnerable
Ubuntuxorg-server-hwe-16.04pro2:1.19.6-1ubuntu4.1~16.04.6+esm10vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.1-3ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.4-1ubuntu3~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.5+git20191008-0ubuntu1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.1~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.2vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.3vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.4vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.5vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.6vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.7vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.8vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.9vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.10vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm1vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm2vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm3vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm4vulnerable
Ubuntuxorg-server-hwe-18.04pro2:1.20.8-2ubuntu2.2~18.04.11+esm5vulnerable
Ubuntuxorg-server22.042:1.20.13-1ubuntu1vulnerable
Ubuntuxorg-server22.042:1.20.13-1ubuntu2vulnerable
Ubuntuxorg-server22.042:1.20.14-1ubuntu1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.1vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.2vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.3vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.4vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.5vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.6vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.7vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.8vulnerable
Ubuntuxorg-server22.042:21.1.3-2ubuntu2.9vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.1vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.2vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.5vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.7vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.8vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.9vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.10vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.11vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.12vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.13vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.14vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.15vulnerable
Ubuntuxorg-server22.042:21.1.4-2ubuntu1.7~22.04.16vulnerable
Ubuntuxwayland22.042:21.1.2-0ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.3-1vulnerable
Ubuntuxwayland22.042:21.1.3-1ubuntu1vulnerable
Ubuntuxwayland22.042:21.1.4-1vulnerable
Ubuntuxwayland22.042:22.1.0-1vulnerable
Ubuntuxwayland22.042:22.1.1-1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.1vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.2vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.3vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.4vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.5vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.6vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.7vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.9vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.10vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.11vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.12vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.13vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.14vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.15vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.17vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.18vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.19vulnerable
Ubuntuxwayland22.042:22.1.1-1ubuntu0.20vulnerable
Ubuntuxorg-server24.042:21.1.7-3ubuntu2vulnerable
Ubuntuxorg-server24.042:21.1.7-3ubuntu2.1vulnerable
Ubuntuxorg-server24.042:21.1.10-1ubuntu1vulnerable
Ubuntuxorg-server24.042:21.1.11-2ubuntu1vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.1vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.2vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.3vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.4vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.5vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.6vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.8vulnerable
Ubuntuxorg-server24.042:21.1.12-1ubuntu1.9vulnerable
Ubuntuxwayland24.042:23.2.0-1vulnerable
Ubuntuxwayland24.042:23.2.0-1ubuntu0.1vulnerable
Ubuntuxwayland24.042:23.2.3-1vulnerable
Ubuntuxwayland24.042:23.2.4-1vulnerable
Ubuntuxwayland24.042:23.2.4-1build1vulnerable
Ubuntuxwayland24.042:23.2.4-1build2vulnerable
Ubuntuxwayland24.042:23.2.4-1build3vulnerable
Ubuntuxwayland24.042:23.2.6-1vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.1vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.2vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.4vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.5vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.6vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.7vulnerable
Ubuntuxwayland24.042:23.2.6-1ubuntu0.8vulnerable
Ubuntuxorg-server25.102:21.1.16-1ubuntu1vulnerable
Ubuntuxorg-server25.102:21.1.18-1ubuntu1vulnerable
Ubuntuxorg-server25.102:21.1.18-1ubuntu1.1vulnerable
Ubuntuxwayland25.102:24.1.6-1vulnerable
Ubuntuxwayland25.102:24.1.6-1ubuntu1vulnerable
Ubuntuxwayland25.102:24.1.6-1ubuntu1.1vulnerable
Ubuntuxorg-server26.102:21.1.22-1ubuntu1vulnerable
Ubuntuxorg-server26.102:21.1.22-1ubuntu4vulnerable
Ubuntuxorg-server26.102:21.1.24-1ubuntu1vulnerable
Ubuntuxwayland26.102:24.1.10-1vulnerable
Ubuntuxwayland26.102:24.1.12-1vulnerable
Ubuntuxwayland26.102:24.1.13-1vulnerable
Ubuntuxwayland26.102:24.1.14-1vulnerable
Ubuntuxorg-server26.042:21.1.18-1ubuntu1vulnerable
Ubuntuxorg-server26.042:21.1.21-1ubuntu1vulnerable
Ubuntuxorg-server26.042:21.1.22-1ubuntu1vulnerable
Ubuntuxorg-server26.042:21.1.22-1ubuntu1.2vulnerable
Ubuntuxorg-server26.042:21.1.22-1ubuntu1.3vulnerable
Ubuntuxwayland26.042:24.1.6-1ubuntu1vulnerable
Ubuntuxwayland26.042:24.1.8-1vulnerable
Ubuntuxwayland26.042:24.1.9-1vulnerable
Ubuntuxwayland26.042:24.1.10-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxwaylandsourcesid2:24.1.13-1not yet assignedNot reportedNot reported
Debianxwaylandsourceforky2:24.1.13-1not yet assignedNot reportedNot reported
Debianxwaylandsourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debianxwaylandsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Debianxorg-serversourcesid2:21.1.24-1not yet assignedNot reported[1141703]
Debianxorg-serversourceforky2:21.1.24-1not yet assignedNot reported[1141703]
Debianxorg-serversourcetrixie2:21.1.16-1.3+deb13u4not yet assignedNot reported[1141703]
Debianxorg-serversourcebookworm(unfixed)not yet assignedNot reported[1141703]
Cpex_servercpeNot reported21.2.24Not reportedNot reportedNot reported
CpexwaylandcpeNot reported24.1.13Not reportedNot reportedNot reported
Susexwaylandrpmlinux enterprise server 16.024.1.6-160000.6.1Not reportedSUSE-SU-2026:22617-1Not reported
Susexwaylandrpmlinux enterprise server for sap applications 16.024.1.6-160000.6.1Not reportedSUSE-SU-2026:22617-1Not reported
Opensusexwaylandrpmleap 16.024.1.6-160000.6.1Not reportedOPENSUSE-SU-2026:21283-1Not reported
Opensusexorg-x11-serverrpmleap 16.021.1.15-160000.6.1Not reportedOPENSUSE-SU-2026:21273-1Not reported
Opensusexorg-x11-serverrpmtumbleweed21.1.21-8.1Not reportedOPENSUSE-SU-2026:11244-1Not reported
Opensusexwaylandrpmtumbleweed24.1.12-1.1Not reportedOPENSUSE-SU-2026:11227-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp4-espos1.20.3-150400.38.74.1Not reportedSUSE-SU-2026:2789-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp4-ltss1.20.3-150400.38.74.1Not reportedSUSE-SU-2026:2789-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp4-ltss1.20.3-150400.38.74.1Not reportedSUSE-SU-2026:2789-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp41.20.3-150400.38.74.1Not reportedSUSE-SU-2026:2789-1Not reported
Susexorg-x11-serverrpmlinux enterprise module for basesystem 15 sp721.1.15-150700.5.22.1Not reportedSUSE-SU-2026:2788-1Not reported
Susexorg-x11-serverrpmlinux enterprise module for development tools 15 sp721.1.15-150700.5.22.1Not reportedSUSE-SU-2026:2788-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp5-espos21.1.4-150500.7.52.1Not reportedSUSE-SU-2026:2791-1Not reported
Susexorg-x11-serverrpmlinux enterprise high performance computing 15 sp5-ltss21.1.4-150500.7.52.1Not reportedSUSE-SU-2026:2791-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp5-ltss21.1.4-150500.7.52.1Not reportedSUSE-SU-2026:2791-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp521.1.4-150500.7.52.1Not reportedSUSE-SU-2026:2791-1Not reported
Susexwaylandrpmlinux enterprise workstation extension 15 sp724.1.5-150700.3.22.1Not reportedSUSE-SU-2026:2787-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 15 sp6-ltss21.1.11-150600.5.31.1Not reportedSUSE-SU-2026:2786-1Not reported
Susexorg-x11-serverrpmlinux enterprise server for sap applications 15 sp621.1.11-150600.5.31.1Not reportedSUSE-SU-2026:2786-1Not reported
Susexorg-x11-serverrpmlinux enterprise server 12 sp5-ltss1.19.6-10.105.1Not reportedSUSE-SU-2026:2792-1Not reported
Susexorg-x11-serverrpmlinux enterprise server ltss extended security 12 sp51.19.6-10.105.1Not reportedSUSE-SU-2026:2792-1Not reported

[Debian bug #1141703]

Notes

[trixie] xwayland: Minor issue; Xwayland shouldn't be running as root [bookworm] xwayland: Minor issue; Xwayland shouldn't be running as root

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xorg-server-source]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xserver-common]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · all · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · all · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xserver-xephyr]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xserver-xorg-core]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xserver-xorg-dev]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xserver-xorg-legacy]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (4)

    • 2:21.1.7-3+deb12u12 · amd64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u12 · arm64 · bookworm

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · amd64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

    • 2:21.1.7-3+deb12u13 · arm64 · bookworm-security

      Affected

      nvd · xorg-server · debian · bookworm; nvd · xorg-server · debian · 12

  • [xwayland]Unknown
    Details (2)

    • 2:22.1.9-1 · amd64 · bookworm

      Affected

      nvd · xwayland · debian · bookworm; nvd · xwayland · debian · 12

    • 2:22.1.9-1 · arm64 · bookworm

      Affected

      nvd · xwayland · debian · bookworm; nvd · xwayland · debian · 12

[Debian 13 (Trixie)]

  • [xnest]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xorg-server-source]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xserver-common]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · all · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · all · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xserver-xephyr]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xserver-xorg-core]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xserver-xorg-dev]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xserver-xorg-legacy]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xvfb]Unknown

    Source package: [xorg-server]

    Details (5)

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

      Affected · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

    • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

      Fixed · Fixed: 2:21.1.16-1.3+deb13u4

      nvd · xorg-server · debian · 13

  • [xwayland]Unknown
    Details (2)

    • 2:24.1.6-1 · amd64 · trixie

      Affected

      nvd · xwayland · debian · 13

    • 2:24.1.6-1 · arm64 · trixie

      Affected

      nvd · xwayland · debian · 13

[openSUSE Tumbleweed]

  • [xorg-x11-server]Unknown

    Source package: [xorg-x11-server]

    Details (1)

    • 21.1.24-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 21.1.21-8.1

      nvd · xorg-x11-server · opensuse · tumbleweed

  • [xorg-x11-server-extra]Unknown

    Source package: [xorg-x11-server]

    Details (1)

    • 21.1.24-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 21.1.21-8.1

      Version impact unknown

      nvd · xorg-x11-server · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]