[Git][security-tracker-team/security-tracker][master] Add references for xorg-server issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Jun 22 20:19:53 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3f732c3a by Salvatore Bonaccorso at 2026-06-22T21:19:39+02:00
Add references for xorg-server issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13209,64 +13209,74 @@ CVE-2026-50256 (A stack-based buffer overflow flaw was found in the X.Org X serv
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fcb31be201a6e07
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/a569eb4f36ed96a9e445ececd7e8d98c223461a0 (xorg-server-21.1.23)
 CVE-2026-50257 (A use-after-free flaw was found in the X.Org X server and Xwayland in  ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f304b57444be3991fd9d3389f309c6eeb056a6c4 (xorg-server-21.1.23)
 CVE-2026-50258 (A stack-based buffer overflow flaw was found in the X.Org X server and ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d6563ad266f9a801e
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/eced7e74cad4a46c3a3c17b2df13b70b8bedfc25 (xorg-server-21.1.23)
 CVE-2026-50259 (A stack-based buffer overflow flaw was found in the X.Org X server and ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e47c52eacf6e00b
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/54c3d9fad0f2f97835da9d275b53255f4963029f (xorg-server-21.1.23)
 CVE-2026-50260 (A use-after-free flaw was found in the X.Org X server and Xwayland in  ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428c8e30c411cc0b
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f304b57444be3991fd9d3389f309c6eeb056a6c4 (xorg-server-21.1.23)
 CVE-2026-50261 (A use-after-free flaw was found in the X.Org X server and Xwayland in  ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d67104443b44812
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/92a167ab3fda0bee41cf97f6a40a4c01c67d85d4 (xorg-server-21.1.23)
 CVE-2026-50262 (An out-of-bounds read flaw was found in the X.Org X server and Xwaylan ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/6d459e4daf715bea8abdafa8fb130be2f8a1d145
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/6d459e4daf715bea8abdafa8fb130be2f8a1d145
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/94341bd715d62ba8da4c1851f517018996da1af8 (xorg-server-21.1.23)
 CVE-2026-50263 (A use-after-free flaw was found in the X.Org X server and Xwayland in  ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada98c4918bf9e05
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/182c23f780402062ab31963776a19d5b87e25ac8 (xorg-server-21.1.23)
 CVE-2026-50264 (An out-of-bounds write flaw was found in the X.Org X server and Xwayla ...)
 	- xorg-server 2:21.1.23-1 (bug #1138680)
 	- xwayland 2:24.1.12-1 (bug #1138703)
 	[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be running as root)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/06/02/1
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f
-	NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/commit/b7aa65cc3bb11b792ce2a3f511ba9b863acb11c8
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/b7aa65cc3bb11b792ce2a3f511ba9b863acb11c8
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce6e9520440ce7f
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/4926348d826b7dc12d51d7e41bd9068aee5f90af (xorg-server-21.1.23)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/f0b8e6e1d969548c0625051d56a780e5df39de26 (xorg-server-21.1.23)
 CVE-2026-9614 (An Improper Access Control vulnerability in IvantiNeurons forITSM(clou ...)
 	NOT-FOR-US: Ivanti
 CVE-2026-9330 (IBM WebSphere Application Server 9.0, and 8.5 is affected by an improp ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f732c3ae68d20e3b410e56c27658cbfab973cfa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f732c3ae68d20e3b410e56c27658cbfab973cfa
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260622/86eb2028/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list