[Git][security-tracker-team/security-tracker][master] 2 commits: Track xorg-server issues fixed in unstable
Emilio Pozuelo Monfort (@pochu)
pochu at debian.org
Wed Aug 5 11:22:45 BST 2026
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6049dc93 by Emilio Pozuelo Monfort at 2026-08-05T12:20:17+02:00
Track xorg-server issues fixed in unstable
- - - - -
069ad916 by Emilio Pozuelo Monfort at 2026-08-05T12:22:16+02:00
Track xwayland issues fixed in unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25394,15 +25394,15 @@ CVE-2026-56001 (A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before
NOTE: https://www.openwall.com/lists/oss-security/2026/07/08/1
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/be0b08e2d354138d3222b4490e2a77c6ee42f778 (libXfont2-2.0.8)
CVE-2026-56000 (Local attackers with a X connection able to provide GLX commit to the ...)
- - xorg-server <unfixed> (bug #1141703)
- - xwayland <unfixed>
+ - xorg-server 2:21.1.24-1 (bug #1141703)
+ - xwayland 2:24.1.13-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
NOTE: https://www.openwall.com/lists/oss-security/2026/07/08/2
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043
CVE-2026-55999 (Local attackers with a X connection able to provide PCX fonts to the X ...)
- - xorg-server <unfixed> (bug #1141703)
- - xwayland <unfixed>
+ - xorg-server 2:21.1.24-1 (bug #1141703)
+ - xwayland 2:24.1.13-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
NOTE: https://www.openwall.com/lists/oss-security/2026/07/08/2
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1cd76a840ecff5b282bf1b9d842b7d9983a92508...069ad91673bf7295095ae2fd07a339c795c51e72
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1cd76a840ecff5b282bf1b9d842b7d9983a92508...069ad91673bf7295095ae2fd07a339c795c51e72
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260805/6a218890/attachment.htm>
More information about the debian-security-tracker-commits
mailing list