Package: godot3-server (3.6+ds-2) Headless Godot game engine run-time Other Packages Related to godot3-server: [libbullet3.24t64 ] (>= 3.24+dfsg)
professional 3D Game Multiphysics Library
[libc6 ] (>= 2.38)
GNU C Library: Shared libraries
[libenet7 ]
thin network communication layer on top of UDP
[libfreetype6 ] (>= 2.2.1)
FreeType 2 font engine, shared library files
[libgcc-s1 ] (>= 3.0)
GCC support library
[libminiupnpc18 ] (>= 2.2.8)
UPnP IGD client lightweight library
[libogg0 ] (>= 1.0rc3)
Ogg bitstream library
[libopus0 ] (>= 1.1)
Opus codec runtime library
[libpcre2-32-0 ] (>= 10.22)
New Perl Compatible Regular Expression Library - 32 bit runtime files
[libpng16-16t64 ] (>= 1.6.2)
PNG library - runtime (version 1.6)
[librecast1 ] (>= 1.5.1+git20210215.e75adf8)
Software implementation of Recast Navigation (shared library)
[libsquish0 ] (>= 1.15)
DXT texture compression library
[libstdc++6 ] (>= 13.1)
GNU Standard C++ Library v3
[libtheora0 ] (>= 1.0)
Theora Video Compression Codec (shared library - libtheora)
[libvorbis0a ] (>= 1.1.2)
decoder library for Vorbis General Audio Compression Codec
[libvpx9 ] (>= 1.12.0)
VP8 and VP9 video codec (shared library)
[libwebp7 ] (>= 1.4.0)
Lossy compression of digital photographic images (shared library)
[libwslay1 ] (>= 1.1.1)
WebSocket library written in C. Shared library
[libzstd1 ] (>= 1.5.5)
fast lossless compression algorithm
[zlib1g ] (>= 1:1.2.0)
compression library - runtime
Package file paths (5) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/godot3-server /usr/share/doc/godot3-server/changelog.Debian.gz /usr/share/doc/godot3-server/changelog.gz /usr/share/doc/godot3-server/copyright /usr/share/man/man6/godot3-server.6.gz Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-110736 ] Published: Oct 14, 2026, 3:53:29 PM UTC
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets read from the hash table of
Low(3.6) Affected Details (2) 3.6+ds-2 · amd64 · trixie
Affected
nvd · godot · debian · 13
3.6+ds-2 · arm64 · trixie
Affected
nvd · godot · debian · 13
[CVE-2026-110735 ] Published: Oct 14, 2026, 3:41:50 PM UTC
Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string length is read from the
Low(2.5) Affected Details (2) 3.6+ds-2 · amd64 · trixie
Affected
nvd · godot · debian · 13
3.6+ds-2 · arm64 · trixie
Affected
nvd · godot · debian · 13
[CVE-2026-110734 ] Published: Oct 14, 2026, 3:36:08 PM UTC
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from t
Low(2.5) Affected Details (2) 3.6+ds-2 · amd64 · trixie
Affected
nvd · godot · debian · 13
3.6+ds-2 · arm64 · trixie
Affected
nvd · godot · debian · 13
Fixed and unaffected versions (3) CVE Severity Version impact [CVE-2021-26826 ] Published: Feb 8, 2021, 3:15:12 PM UTC
Godot Engine vulnerabilities
High(7.8) Fixed Details (2) 3.6+ds-2 · amd64 · trixie
Fixed · Fixed: 3.5.1-stable-1
usn · godot · debian · 13
3.6+ds-2 · arm64 · trixie
Fixed · Fixed: 3.5.1-stable-1
usn · godot · debian · 13
[CVE-2021-26825 ] Published: Feb 8, 2021, 3:15:12 PM UTC
Godot Engine vulnerabilities
High(7.8) Fixed Details (2) 3.6+ds-2 · amd64 · trixie
Fixed · Fixed: 3.5.1-stable-1
usn · godot · debian · 13
3.6+ds-2 · arm64 · trixie
Fixed · Fixed: 3.5.1-stable-1
usn · godot · debian · 13
[CVE-2019-10069 ] Published: May 31, 2019, 10:29:00 PM UTC
godot: CVE-2019-10069
Medium Fixed Details (2) 3.6+ds-2 · amd64 · trixie
Fixed · Fixed: 3.2-stable-1
dsa · godot · debian · 13
3.6+ds-2 · arm64 · trixie
Fixed · Fixed: 3.2-stable-1
dsa · godot · debian · 13
Last synced: Oct 28, 2026, 12:44:10 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
3.6+ds-2 / amd64 Observed Sep 1, 2026 sha256 51bc53fb680b…b6f843dbSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 51bc53fb680b8c0a1ec20657dbddf43d0661f4965a691d7a57031e92b6f843db
Verify download
printf '%s %s\n' '51bc53fb680b8c0a1ec20657dbddf43d0661f4965a691d7a57031e92b6f843db' 'godot3-server_3.6+ds-2_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
3.6+ds-2 / arm64 Observed Sep 1, 2026 sha256 b9fe467f3dec…00f938b3Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): b9fe467f3dec34d92387fd8603a42c26ee7b5fcd9773448bb90dbc7100f938b3
Verify download
printf '%s %s\n' 'b9fe467f3dec34d92387fd8603a42c26ee7b5fcd9773448bb90dbc7100f938b3' 'godot3-server_3.6+ds-2_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64
