[Git][security-tracker-team/security-tracker][master] 2 commits: Track xorg-server issues fixed in unstable

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Wed Aug 5 11:22:45 BST 2026



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6049dc93 by Emilio Pozuelo Monfort at 2026-08-05T12:20:17+02:00
Track xorg-server issues fixed in unstable

- - - - -
069ad916 by Emilio Pozuelo Monfort at 2026-08-05T12:22:16+02:00
Track xwayland issues fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25394,15 +25394,15 @@ CVE-2026-56001 (A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before
 	NOTE: https://www.openwall.com/lists/oss-security/2026/07/08/1
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/be0b08e2d354138d3222b4490e2a77c6ee42f778 (libXfont2-2.0.8)
 CVE-2026-56000 (Local attackers with a X connection able to provide GLX commit to the  ...)
-	- xorg-server <unfixed> (bug #1141703)
-	- xwayland <unfixed>
+	- xorg-server 2:21.1.24-1 (bug #1141703)
+	- xwayland 2:24.1.13-1
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/07/08/2
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043
 CVE-2026-55999 (Local attackers with a X connection able to provide PCX fonts to the X ...)
-	- xorg-server <unfixed> (bug #1141703)
-	- xwayland <unfixed>
+	- xorg-server 2:21.1.24-1 (bug #1141703)
+	- xwayland 2:24.1.13-1
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/07/08/2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1cd76a840ecff5b282bf1b9d842b7d9983a92508...069ad91673bf7295095ae2fd07a339c795c51e72

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1cd76a840ecff5b282bf1b9d842b7d9983a92508...069ad91673bf7295095ae2fd07a339c795c51e72
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260805/6a218890/attachment.htm>


More information about the debian-security-tracker-commits mailing list