PatchTheCVExcb vulnerabilities and fixes
Recent CVEs affecting xcb, with upgrade or downgrade steps. 5 tracked.
xcb has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-02-09. Highest priority: CVE-2021-26957 (score 64/100).
- CVE-2021-26958 HIGH 8.8 UPGRADE An issue was discovered in the xcb crate through 2021-02-04 for Rust
- CVE-2021-26957 CRITICAL 9.8 UPGRADE An issue was discovered in the xcb crate through 2021-02-04 for Rust
- CVE-2021-26956 CRITICAL 9.8 UPGRADE An issue was discovered in the xcb crate through 2021-02-04 for Rust
- CVE-2021-26955 CRITICAL 9.8 UPGRADE An issue was discovered in the xcb crate through 2021-02-04 for Rust
- CVE-2020-36205 MEDIUM 5.5 UPGRADE An issue was discovered in the xcb crate through 2020-12-10 for Rust
FAQ
How do I fix xcb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xcb being exploited right now?
None of the tracked xcb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xcb CVE should I patch first?
CVE-2021-26957 currently ranks highest (64/100): An issue was discovered in the xcb crate through 2021-02-04 for Rust.