CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

x11-servers/xorg-server 21.1.25,1

X.Org X server and related programs

Port info

Maintainer
x11@FreeBSD.org
Packages
latest: xephyr 21.1.25,1, xorg-nestserver 21.1.25,2, xorg-server 21.1.25,1, xorg-vfbserver 21.1.25,1
Upstream
up to date
Last update
to 21.1.25,1 · 55b667ca6c
Quarterly
2026Q4: xephyr 21.1.25,1, xorg-nestserver 21.1.25,2, xorg-server 21.1.25,1, xorg-vfbserver 21.1.25,1 · last MFH f09d699bf8
Formerly
x11-servers/xephyr until 2022-08-02, x11-servers/xorg-nestserver until 2022-08-02, x11-servers/xorg-vfbserver until 2022-08-02
WWW
https://gitlab.freedesktop.org/xorg/xserver
Links
cgit · VuXML

Install

Package
# pkg install xephyr
# pkg install xorg-nestserver
# pkg install xorg-server
# pkg install xorg-vfbserver
installs xephyr 21.1.25,1, xorg-nestserver 21.1.25,2, xorg-server 21.1.25,1, xorg-vfbserver 21.1.25,1 from latest; from quarterly (2026Q4) xephyr 21.1.25,1, xorg-nestserver 21.1.25,2, xorg-server 21.1.25,1, xorg-vfbserver 21.1.25,1
Port
# cd /usr/ports/x11-servers/xorg-server && make install clean
Size
841 KiB download · 2.1 MiB installed
Depends on
devel/libunwind 20250904, graphics/libglvnd 1.7.0, graphics/mesa-dri 26.2.2_1, x11-fonts/libXfont2 2.0.9, x11/libXau 1.0.12, x11/libXdmcp 1.1.5, x11/libxcb 1.17.0, x11/libxkbfile 1.2.0, x11/libxshmfence 1.3.3, x11/pixman 0.46.4, x11/xcb-util 0.4.1,1, x11/xcb-util-image 0.4.1, x11/xcb-util-keysyms 0.4.1, x11/xcb-util-renderutil 0.3.10, x11/xcb-util-wm 0.4.2, x11/xkbcomp 1.5.0, x11/xkeyboard-config 2.48
License
MIT
Note
Size, dependencies, options and messages are those of xephyr.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1621.1.25,121.1.25,1–
FreeBSD 1521.1.25,121.1.25,1–
FreeBSD 1421.1.25,121.1.25,121.1.25,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1521.1.25,121.1.25,1–
FreeBSD 1421.1.25,121.1.25,121.1.25,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (3)

The CVE record lists the packaged version 21.1.25,1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-560009.02026-07-08Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, …
CVE-2026-559998.52026-07-08Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow…
CVE-2023-55747.02023-10-25A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple prot…

VuXML only (0)

Listed in VuXML, the packaged version 21.1.25,1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (33)

Show 33 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVECVSSPublishedDescription
CVE-2026-560009.02026-07-08VuXML · Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, …
CVE-2026-559998.52026-07-08VuXML · Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a heap buffer overflow…

Problem reports (9) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297584maintainer-feedback? x11-servers/xorg-server: Xorg does not automatically detect outputs/monitors on a USB hubNew2026-08-17
297517maintainer-feedback? x11-servers/xorg-server: server stops when started in the background of current VTNew2026-08-14
273369maintainer-feedback? x11-servers/xorg-server: "Cannot run in framebuffer mode" after updating to 21.1.8_4,1Open2026-05-12
273161needs-patch x11-servers/xorg-server: rootless without setuid bitNew2026-02-21
253278maintainer-feedback? x11-servers/xorg-server: Lock file: Various fixesIn Progress2025-10-26
Show all 9
PRSummaryStatusChanged
287456maintainer-feedback? x11-servers/xorg-server: backport TearFree page flipsNew2025-10-25
288636maintainer-feedback? x11-servers/xorg-server:unable to build- redefinition of typedef '__GLXscreen' is a C11 featureNew2025-08-03
282643maintainer-feedback? x11-servers/xorg-server:unable to build riscv64-ld: error: undefined symbol: xf86EnableIONew2025-04-12
280614maintainer-feedback? x11-servers/xorg-server: 'X -configure' does not delete /tmp/.X11-unix/X0 when doneNew2024-08-04

Commits (287)

Eric Anholt (anholt) · 6.8.2_3
[1] Fix the Chipset lines written by xorgcfg for 3dfx cards. [2] Add the PCI ID for Radeon X600, 0x5B62 to a place that was missed.

PR:		[1] ports/32121
Submitted by:	[1] alane
		[2] Vladimir Kushnir <vkushnir@i.kiev.ua>
0cf7952879
Dejan Lesjak (lesi) · 6.8.2_2
Fix up plist after modifications to mtree (BSD.x11-4.dist rev. 1.27).
5066edac69
Dejan Lesjak (lesi) · 6.8.2_2
- Correct the ranges of the bus resource windows on sparc64.   This makes PCI video cards work that hang off directly from   the Host-to-PCI bridge in machines like the Blade 100. [1] - Default to old 'keyboard' driver for sparc64. Patches for 'kbd'   one were not enough so until new driver is fixed, this change   makes Xorg work with sparc64 keyboards. Knob WITH_SPARC_KBD is   provided to ease ef

Submitted by:	marius [1]
531f2e7795
Dejan Lesjak (lesi) · 6.8.2_1
Bump max number of buttons supported by mouse driver to 16 so Logitech MediaPlay mouse works. (Xorg Bugzilla #2389)

PR:		ports/80744
Submitted by:	cy
e0be73b4de
Dejan Lesjak (lesi) · 6.8.2
Speed up extract target by not extracting */CVS/*. From ahze:

With Patch:
(pII 400Mhz)
real 1m12.597s
user 0m14.706s
sys 0m12.061s

(athlon 2500+ 3disk raid 0)
real 0m12.912s
user 0m2.884s
sys 0m3.128s

Without Patch:
(pII 400Mhz)
real 1m43.233s
user 0m14.565s
sys 0m13.951s

(athlon 2500+ 3disk raid 0)
real 0m22.967s
user 0m2.925s
sys 0m3.576s

Submitted by:	ahze
63a3d19fec
Dejan Lesjak (lesi) · 6.8.2
Sync with etc/mtree/BSD.x11-4.dist rev. 1.26: Add mt locale directory, since more and more ports create and use it.

Requested by:	krion
Approved by:	portmgr (krion; in advance)
da254b4759
Eric Anholt (anholt) · 6.8.2
Add Peter Grehan's patches to port xorg-server to PowerPC.

PR:		ports/78345, ports/78346, ports/78348, ports/78352,
		ports/78353, ports/78354, ports/78355, ports/78356,
		ports/78358, ports/78359
Submitted by:	grehan
e2f679668f
Eric Anholt (anholt) · 6.8.2
Remove a duplicated imake define that adds noise to the configure stage.
bacbef5a54
Dejan Lesjak (lesi) · 6.8.2
Upgrade X.Org ports to 6.8.2. Release notes are available at http://www.x.org/X11R6.8.2/doc/RELNOTES.html

Thanks to kris and krion for running several cluster test builds,
maintainers of GNOME for prompt responses, portmgr for postponing ports
freeze for this update, testers on FreeBSD-X11@ list and others that I
might have mised here.

Also included:
- fix for ATI Mobility on Dell Inspiron 7500 (obtained from Marc Aurele La
  France; obtained and tested by julian)
- fix for kbd driver on Sparc64 (tested by Aaron Dudek, Michael G. Jung and
  Matthias Muthmann), which still appears to have problems with some
  keyboards - so
- fix for kbd driver on PC98 (reported and tested by NAKAJI Hiroyuki; PR
  ports/77217)
- fix for i810 on HP D530 (obtained from Egbert Eich; obtained and tested
  by Anders Nor Berle; PR ports/74757)
ac39221672
Eric Anholt (anholt) · 6.8.1_2
[1] Add i810 driver to AMD64 package. [2] Put the manpages from section 4 under 4x.  For example, you can do     "man 4x vga" to get the X vga(4x) manpage, still do man 4 cirrus to get     cirrus(4x), and man -a vga to get both vga manpages. [3] Apply several important-looking fixes to ATI drivers from the stable branch:     - Fix mode setting with Mach64 on some laptops.     - Don't crash with ma

PR:		[2] ports/25576
Submitted by:	[2] fanf
Requested by:	[1] peter
Obtained from:	[3] XORG-6_8-branch
31179eebc6
Eric Anholt (anholt) · 6.8.1_1
[1] Fix a crash on startup with i830+ systems due to failure to follow an API change that occurred. [2] Install the xorg.conf referred to by xorg.conf(5).  Installation was disabled during the XF86 name avoidance phase, but could still be of use. [3] Add a section about the Composite extension to xorg.conf. [4] Add MakeDllModules YES to the WITH_DEBUG flag's options.  While it won't package correc

PR:		[1] ports/75425
		[2] ports/73915
		[6] ports/73257
Submitted by:	[1] Marc Silver, marcs at draenor dot org
		[2] Frank J. Laszlo, laszlof at vonostingroup dot com
		[6] Ken Stailey kstailey at yahoo dot com
		[6] r1.4 of X.Org CVS.
Approved by:	portmgr
08ae21589b
Eric Anholt (anholt) · 6.8.1
Re-add libXThrStub for FreeBSD that requires thread stubs.  Between 6.7 and 6.8 I had moved libXThrStub into libX11, because it seemed unnecessary.  However, because libc_r symbols are also weak, the weak stubs in libX11 would interfere, however they don't if they are in a library linked by libX11.  The most common manifestation of the problem was: GThread-ERROR **: file gthread-posix.c: line 137 

PR:		ports/75477
Submitted by:	KIMURA Yasuhiro, yasu at utahime dot org
Testing by:	marcus
df0e9fb363
Pav Lucistnik (pav) · 6.8.1
- Rewrap to fit on 80 columns console

Approved by:	anholt (x11 hat)
2afbeab87a
Eric Anholt (anholt) · 6.8.1
Update X.Org ports to 6.8.1, and the DRI port to use Mesa 6.2.  Because Mesa 6.2 DRI drivers are incompatible with the old libGL in XFree86, they have been repocopied to graphics/xfree86-dri.  Also note that with this commit the html manpages are going away, and with it the runtime dependency on perl for the imake port.

Release notes at: http://www.x.org/X11R6.8.1/RELNOTES.txt

Props to:	kris (multiple cluster runs and sorting through logs)
		lesi (fixing all the issues in those logs, and more)
c90ee83f03
Dejan Lesjak (lesi) · 6.7.0_9
Don't refer people to nonexistant 'Monitors' file in xorgconfig. (freedesktop.org Bugzilla #1692)

Reported by:	znerd
PR:		ports/56275
7f352fc47f
Dejan Lesjak (lesi) · 6.7.0_9
Fix behaviour of keyboard under pc98 where keycodes differ from i386.

Submitted by:	Satoshi Kimura
Approved by:	portmgr (linimon), mentor (anholt)
8d307e831d
Dejan Lesjak (lesi) · 6.7.0_8
Fix behaviour of keyboard under sparc64, where keycodes were off by one (i.e., when pressing 'd' on keyboard, server would get code for 'f').

Submitted by:	marius
Approved by:	portmgr (linimon), anholt (mentor)
4985aab58d
Dejan Lesjak (lesi) · 6.7.0_7
Fix problem with XVideo (insufficient resources for operation). [1] Use correct prototype for sysarch(2). [2]

PR:		ports/70317 [1],  ports/71037 [2]
Submitted by:	Andrew Elmore (aelmore at interwoven.com) [2]
Approved by:	anholt (mentor)
Obtained from:	Free Desktop.Org Bugzilla #474 [1]
ab67e24779
Dejan Lesjak (lesi) · 6.7.0_6
Use MASTER_SITE_XORG.

Approved by:	anholt (mentor)
e411d635e5
Dejan Lesjak (lesi) · 6.7.0_6
Fix missing symbol with SiS driver [1]. Fix package list (partly [2]).

PR:		ports/69790 [1], ports/70376 [2]
Submitted by:	Andreas Kohn (andreas AT syndrom23.de) [1]
		John R. Makosky (jrm-spam1 AT crackpot.org) [2]
Approved by:	anholt (mentor)
832fe3dcd8
Pav Lucistnik (pav) · 6.7.0_5
- Correct typo (CLFAGS -> CFLAGS)

PR:		ports/69703
Submitted by:	Masakazu HIGAKI <higamasa@dream.com>
b4ab3f638a
Pav Lucistnik (pav) · 6.7.0_5
- Extend IGNORE message, point users to instructions how to switch   from XFree86-4 to X.Org.

Approved by:	anholt (x11 hat)
b73a79a29d
Eric Anholt (anholt) · 6.7.0_5
- Add the X_WINDOW_SYSTEM={xorg,xfree86-4,xfree86-3} variable to bsd.port.mk,   and make XFREE86_VERSION map to it.  XFREE86_VERSION is now deprecated. - Make xorg the default X_WINDOW_SYSTEM on -current. - Add several new X_*_PORT variables which point to various pieces of X11 based   on the setting of X_WINDOW_SYSTEM, and make ports use them. - Add information to CHANGES about how to handle the 

PR:		ports/68763
Approved by:	portmgr (marcus)
Approved by:	re (scottl)
4eb209da7d
Eric Anholt (anholt) · 6.7.0_5
s/WITH_XLIB/USE_XLIB/ -- fixes missing dependency.

Reported by:	pointyhat via kris (over and over)
47a9baa231
Eric Anholt (anholt) · 6.7.0_5
Rethink the DRI dependency.  It's not actually needed for the server to work. It's only useful with both server and libraries.  It should really be depended on by the metaport instead.

PR:		ports/68484
Submitted by:	Roman Bogorodskiy <bogorodskiy@inbox.ru>
b812c90ccf
Eric Anholt (anholt) · 6.7.0_5
And my hat collection grows.  Actually remove the remnants of pkg-message stuff.
931b9ae630
Eric Anholt (anholt) · 6.7.0_5
- Install the server setuid by default.  The x11/wrapper/files/wrapper.c code is already in the server.  I can't even imagine a situation where running an X server (which is run as root, mind you) is ok, while having a setuid X server with arguments and environment checking ala wrapper.c is not.  But put an option in anyway. - Include the SERVER_PATCHES define needed for the new server ports.
0c7c8dd0cf
Eric Anholt (anholt) · 6.7.0_4
Install xorgcfg and xorgconfig.

PR:		ports/67656
Submitted by:	Alex Deiter <tiamat@komi.mts.ru>
899dc07994
Eric Anholt (anholt) · 6.7.0_3
- Only set XFREE86_HTML_MAN if there are going to be manpages installed   (XMAN_DIRS is set). - Remove spammed-in configure.gen.pre - Pass thread flags/libs to configure like should have been done - Add changes to config/cf/* for the fonts ports.
62e4243072
Eric Anholt (anholt) · 6.7.0_3
- Depend on xorg-libraries by default instead of the modular libraries. - Don't install Xserver.1 (a manpage for all X servers), which is provided by   xorg-manpages.
f0b648cca2
Eric Anholt (anholt) · 6.7.0_2
Add some more patches based on XFree86-4-libraries/files, for the xorg-libraries and -clients ports.
a0c3b7ff78
Eric Anholt (anholt) · 6.7.0_2
[1] Fix packaging on amd64 [2] Remove sparc64 patch that got spammed into the wrong location in FreeBSD.cf [3] Fix many problems in the Render implementation. [4] Depend on libGL to provide glx headers, until they're located in a more     appropriate package.

PR:		[1] ports/66682
Submitted by:	[1] Francois Tigeot <ftigeot@wolfpond.org>
Obtained from:	[3] X.Org CVS
147aa0a9a8
Eric Anholt (anholt) · 6.7.0_1
[1] Add missing dependency on freetype2. [2] Add missing AMD64 patch that was in XFree86-4-Server.

Reported by:	[1] bento via kris
Submitted by:	[2] Francois Tigeot <ftigeot@wolfpond.org>
b38e118caa
Joe Marcus Clarke (marcus) · 6.7.0
Correct a typo in one of the LIB_PC_DEPENDS.
74ca7d9895
Eric Anholt (anholt) · 6.7.0
New port: xorg-server taken from X.org release 6.7.0.

Tested only on x86 so far due to problems installing dependencies on build
cluster.  Based on XFree86-4-Server originally, but I decided the history
wasn't worth keeping that much as a lot has been changed.
b29c861b4d