libxrender - Debian Package Tracker

general

source: libxrender (main)
version: 1:0.9.12-1
maintainer: Debian X Strike Force (archive) (DMD)
arch: any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1:0.9.10-1
oldstable: 1:0.9.10-1.1
stable: 1:0.9.12-1
testing: 1:0.9.12-1
unstable: 1:0.9.12-1

versioned links

1:0.9.10-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:0.9.10-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:0.9.12-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libxrender-dev
libxrender1
libxrender1-udeb

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-88807: A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Created: 2026-09-22 Last update: 2026-10-03 05:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-88807: A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

Created: 2026-09-22 Last update: 2026-10-03 05:00

lintian reports 1 error and 5 warnings high

Lintian reports 1 error and 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-01-16 Last update: 2026-09-14 01:01

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2026-09-02 Last update: 2026-10-05 10:30

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-88807: (needs triaging) A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-09-22 Last update: 2026-10-03 05:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-03-31 15:01

news

[rss feed]

[2025-03-30] libxrender 1:0.9.12-1 MIGRATED to testing (Debian testing watch)
[2025-03-25] Accepted libxrender 1:0.9.12-1 (source) into unstable (Timo Aaltonen)
[2022-06-19] libxrender 1:0.9.10-1.1 MIGRATED to testing (Debian testing watch)
[2022-06-14] Accepted libxrender 1:0.9.10-1.1 (source) into unstable (Holger Levsen)
[2016-12-16] libxrender 1:0.9.10-1 MIGRATED to testing (Debian testing watch)
[2016-12-05] Accepted libxrender 1:0.9.10-1 (source) into unstable (Emilio Pozuelo Monfort)
[2016-10-18] Accepted libxrender 1:0.9.7-1+deb7u3 (source amd64) into oldstable (Markus Koschany)
[2015-11-03] libxrender 1:0.9.9-2 MIGRATED to testing (Britney)
[2015-10-28] Accepted libxrender 1:0.9.9-2 (source) into unstable (Julien Cristau)
[2015-10-28] Accepted libxrender 1:0.9.9-1 (source) into unstable (Julien Cristau)
[2015-04-20] Accepted libxrender 1:0.9.6-1+squeeze1+build1 (source amd64) into squeeze-lts (Raphaël Hertzog)
[2015-04-17] Accepted libxrender 1:0.9.7-1+deb7u2 (source amd64) into proposed-updates->stable-new, proposed-updates (Sebastien Delafond)
[2013-07-12] libxrender 1:0.9.8-1 MIGRATED to testing (Debian testing watch)
[2013-06-30] Accepted libxrender 1:0.9.8-1 (source amd64) (Julien Cristau)
[2013-05-26] libxrender 1:0.9.7-1+deb7u1 MIGRATED to testing (Debian testing watch)
[2013-05-23] Accepted libxrender 1:0.9.6-1+squeeze1 (source amd64) (Moritz Muehlenhoff)
[2013-05-23] Accepted libxrender 1:0.9.7-1+deb7u1 (source amd64) (Julien Cristau)
[2012-05-09] libxrender 1:0.9.7-1 MIGRATED to testing (Debian testing watch)
[2012-04-21] Accepted libxrender 1:0.9.7-1 (source amd64) (Julien Cristau)
[2011-06-23] libxrender 1:0.9.6-2 MIGRATED to testing (Debian testing watch)
[2011-06-12] Accepted libxrender 1:0.9.6-2 (source amd64) (Julien Cristau)
[2010-07-22] libxrender 1:0.9.6-1 MIGRATED to testing (Debian testing watch)
[2010-07-11] Accepted libxrender 1:0.9.6-1 (source amd64) (Julien Cristau)
[2010-03-22] libxrender 1:0.9.5-2 MIGRATED to testing (Debian testing watch)
[2010-03-11] Accepted libxrender 1:0.9.5-2 (source amd64) (Cyril Brulebois)
[2009-12-07] libxrender 1:0.9.5-1 MIGRATED to testing (Debian testing watch)
[2009-11-25] Accepted libxrender 1:0.9.5-1 (source i386) (Julien Cristau)
[2008-06-26] libxrender 1:0.9.4-2 MIGRATED to testing (Debian testing watch)
[2008-06-13] Accepted libxrender 1:0.9.4-2 (source i386) (Brice Goglin)
[2007-09-28] libxrender 1:0.9.4-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 2
RC: 0
I&N: 1
M&W: 1
F&P: 0
patch: 1

links

lintian (1, 5)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:0.9.12-1build1
2 bugs