Packages / Debian 13 (Trixie) / x11 / xserver-xephyr

[Source: xorg-server]

Package: xserver-xephyr (2:21.1.16-1.3+deb13u3)

server X annidato

Other Packages Related to xserver-xephyr:

  • dep: [xserver-common] (>= 2:21.1.16-1.3+deb13u3)

    file comuni usati da vari server X

  • dep: [libaudit1] (>= 1:2.2.1)

    Dynamic library for security auditing

  • dep: [libc6] (>= 2.38)

    GNU C Library: Shared libraries

  • dep: [libepoxy0] (>= 1.0)

    OpenGL function pointer management library

  • dep: [libgl1]

    Vendor neutral GL dispatch library -- legacy GL support

  • dep: [libnettle8t64]

    low level cryptographic library (symmetric and one-way cryptos)

  • dep: [libpixman-1-0] (>= 0.30.0)

    pixel-manipulation library for X and cairo

  • dep: [libselinux1] (>= 3.1~)

    SELinux runtime shared libraries

  • dep: [libsystemd0]

    systemd utility library

  • dep: [libudev1] (>= 183)

    libudev shared library

  • dep: [libunwind8]

    library to determine the call-chain of a program - runtime

  • dep: [libx11-6]

    Libreria lato client X11

  • dep: [libx11-xcb1]

    Xlib/XCB interface library

  • dep: [libxau6] (>= 1:1.0.11)

    Libreria di autorizzazione X11

  • dep: [libxcb-icccm4] (>= 0.4.2)

    utility libraries for X C Binding -- icccm

  • dep: [libxcb-image0] (>= 0.2.1)

    utility libraries for X C Binding -- image

  • dep: [libxcb-keysyms1] (>= 0.4.1)

    utility libraries for X C Binding -- keysyms

  • dep: [libxcb-randr0] (>= 1.1)

    X C Binding, randr extension

  • dep: [libxcb-render-util0]

    utility libraries for X C Binding -- render-util

  • dep: [libxcb-render0]

    X C Binding, render extension

  • dep: [libxcb-shape0]

    X C Binding, shape extension

  • dep: [libxcb-shm0] (>= 1.10)

    X C Binding, shm extension

  • dep: [libxcb-util1] (>= 0.4.0)

    utility libraries for X C Binding -- atom, aux and event

  • dep: [libxcb-xkb1]

    X C Binding, XKEYBOARD extension

  • dep: [libxcb-xv0] (>= 1.2)

    X C Binding, xv extension

  • dep: [libxcb1] (>= 1.8)

    X C Binding

  • dep: [libxdmcp6]

    Libreria del protocollo X11 Display Manager Control Protocol

  • dep: [libxfont2] (>= 1:2.0.1)

    libreria di rasterizzazione dei font X11

  • dep: [libxshmfence1]

    X shared memory fences - shared library

  • rec: [libgl1-mesa-dri] (>= 7.1~rc1)

    implementazione libera dell'API OpenGL -- moduli DRI

Download xserver-xephyr

ArchitecturePackage sizeInstalled sizeFilesPackage
amd643.2 MiB4.8 MiBlist of filesDownload
arm643.1 MiB4.9 MiBlist of filesDownload

Percorsi file del pacchetto (6)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/Xephyr
  • /usr/share/doc/xserver-xephyr/changelog.Debian.gz
  • /usr/share/doc/xserver-xephyr/changelog.gz
  • /usr/share/doc/xserver-xephyr/copyright
  • /usr/share/doc/xserver-xephyr/README
  • /usr/share/man/man1/Xephyr.1.gz

Field source: Debian 13 (Trixie) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 13 (Trixie) nel browserCrea un'immagine che include xserver-xephyr

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2:21.1.16-1.3+deb13u3trixie / mainamd64Debian 13 · main · amd643.2 MiB4.8 MiBpool/main/x/xorg-server/xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb
2:21.1.16-1.3+deb13u3trixie / mainarm64Debian 13 · main · arm643.1 MiB4.9 MiBpool/main/x/xorg-server/xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb
2:21.1.16-1.3+deb13u4trixie-security / mainamd64Debian 13 security · main · amd643.2 MiB4.8 MiBpool/updates/main/x/xorg-server/xserver-xephyr_21.1.16-1.3+deb13u4_amd64.deb
2:21.1.16-1.3+deb13u3trixie-security / mainarm64Debian 13 security · main · arm643.1 MiB4.9 MiBpool/updates/main/x/xorg-server/xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb
2:21.1.16-1.3+deb13u3 (withdrawn)trixie-security / mainamd64Debian 13 security · main · amd643.2 MiB4.8 MiBpool/updates/main/x/xorg-server/xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVEGravitàImpatto per versione
[CVE-2026-88812]

xorg-server: CVE-2026-88812

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93515]

xorg-server: CVE-2026-93515

Medium(5.5)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93516]

xorg-server: CVE-2026-93516

Medium(5.5)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93517]

xorg-server: CVE-2026-93517

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93518]

xorg-server: CVE-2026-93518

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93519]

xorg-server: CVE-2026-93519

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93520]

xorg-server: CVE-2026-93520

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93521]

xorg-server: CVE-2026-93521

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93523]

xorg-server: CVE-2026-93523

High(7.8)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93524]

xorg-server: CVE-2026-93524

Medium(6.1)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-93536]

xorg-server: CVE-2026-93536

Medium(4.4)Interessata
Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Interessata

    dsa · xorg-server · debian · 13

[CVE-2026-55999]

Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing gly

High(8.5)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

[CVE-2026-56000]

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() poin

Critical(9)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Interessata · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u4

    nvd · xorg-server · debian · 13

[CVE-2026-50256]

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow

High(7.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[CVE-2026-50257]

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacke

High(7.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[CVE-2026-50258]

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or

High(7.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[CVE-2026-50259]

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function Che

High(7.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[CVE-2026-50260]

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroyi

High(7.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[CVE-2026-50261]

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a

High(7.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[CVE-2026-50262]

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding t

Medium(5.5)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (5)

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · amd64 · trixie-security · Historical version

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u3 · arm64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

  • 2:21.1.16-1.3+deb13u4 · amd64 · trixie-security

    Corretta · Corretta: 2:21.1.16-1.3+deb13u3

    nvd · xorg-server · debian · 13

[Altri risultati]

Ultima sincronizzazione:

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2:21.1.16-1.3+deb13u3 / amd64Osservato Sep 1, 2026sha256 b259107c58b8…ad99541dImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): b259107c58b8253b7d09a9f3394beb6b5cab20997935b035594962d5ad99541d

Verifica download

printf '%s %s\n' 'b259107c58b8253b7d09a9f3394beb6b5cab20997935b035594962d5ad99541d' 'xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

2:21.1.16-1.3+deb13u3 / arm64Osservato Sep 1, 2026sha256 9364a5a85c00…15e97666Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 9364a5a85c00cb2c91a00a362462d155bf005455921951ced629dde315e97666

Verifica download

printf '%s %s\n' '9364a5a85c00cb2c91a00a362462d155bf005455921951ced629dde315e97666' 'xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

2:21.1.16-1.3+deb13u4 / amd64Osservato Sep 12, 2026 – Oct 24, 2026sha256 c3e26e8da745…bc57fd78Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): c3e26e8da745b6779b68a245c8ea88c585f58f18659710c7e1c33d1fbc57fd78

Verifica download

printf '%s %s\n' 'c3e26e8da745b6779b68a245c8ea88c585f58f18659710c7e1c33d1fbc57fd78' 'xserver-xephyr_21.1.16-1.3+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

2:21.1.16-1.3+deb13u3 / arm64Osservato Sep 1, 2026sha256 9364a5a85c00…15e97666Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 9364a5a85c00cb2c91a00a362462d155bf005455921951ced629dde315e97666

Verifica download

printf '%s %s\n' '9364a5a85c00cb2c91a00a362462d155bf005455921951ced629dde315e97666' 'xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

2:21.1.16-1.3+deb13u3 / amd64Osservato Aug 10, 2026 – Sep 11, 2026sha256 b259107c58b8…ad99541dImpronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): b259107c58b8253b7d09a9f3394beb6b5cab20997935b035594962d5ad99541d

Verifica download

printf '%s %s\n' 'b259107c58b8253b7d09a9f3394beb6b5cab20997935b035594962d5ad99541d' 'xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Fonti

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecuritySep 11, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-security-main-amd64:8dabe4f311ada9aa7c5aba539b0d29dc787f80011036f9372a08446519514caf

    Repository-signature verification record
    Signed-object SHA-256
    da411b141bb70a40e104e02cd2284a3cff1d80df707edec7bcc16de61563ed53
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 12, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    8dabe4f311ada9aa7c5aba539b0d29dc787f80011036f9372a08446519514caf
    Observed SHA-256
    8dabe4f311ada9aa7c5aba539b0d29dc787f80011036f9372a08446519514caf
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb

    Repository-signature verification record
    Signed-object SHA-256
    198287b2fa5f7e3bc836fc6ddb4fe339b90a2fe43dc3f2b57c002a66309e49d5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Observed SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Result
    match verified