[Git][security-tracker-team/security-tracker][master] Reference upstream commits for libx11 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7b577b9b by Salvatore Bonaccorso at 2026-10-10T10:20:26+02:00
Reference upstream commits for libx11 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14085,16 +14085,19 @@ CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser i
 	[trixie] - libx11 <no-dsa> (Minor issue)
 	[bookworm] - libx11 <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/797eaf0bd69524144e0df7af516b680f4b7694e9
 CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM trigger-key regist ...)
 	- libx11 <unfixed> (bug #1149668)
 	[trixie] - libx11 <no-dsa> (Minor issue)
 	[bookworm] - libx11 <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/924fc91f08ece9cddc93609b4dc945a9cc90ea12
 CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input Method) a ...)
 	- libx11 <unfixed> (bug #1149668)
 	[trixie] - libx11 <no-dsa> (Minor issue)
 	[bookworm] - libx11 <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/f263bbca24d04c766775e7af2e203ca41b4ece2e
 CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
 	NOT-FOR-US: elixir-mint Mint
 CVE-2026-93540 (A privilege mismatch was found in Fleet. When a bundle requested names ...)
@@ -22933,6 +22936,7 @@ CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 b
 	[trixie] - libx11 <no-dsa> (Minor issue)
 	[bookworm] - libx11 <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/6d4432b13c0b3b6a644c13de9c793a14db48d545
 CVE-2026-88788 (The Text Styler WordPress plugin through 1.1.1 does not sanitise and e ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-88756 (Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQ ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b577b9b9003e2f5c222d154b86a69b04bdc36a1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b577b9b9003e2f5c222d154b86a69b04bdc36a1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/884e9fd2/attachment-0001.htm>