[Git][security-tracker-team/security-tracker][master] Reference upstream commits for libxi issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9b65ee47 by Salvatore Bonaccorso at 2026-10-10T10:23:00+02:00
Reference upstream commits for libxi issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18282,36 +18282,43 @@ CVE-2026-94282 (An out-of-bounds read in libXi's XI2 enter/leave/focus cookie co
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/8caed97a3e356ff5827704f3c28aed0d50d9136d
 CVE-2026-94281 (An out-of-bounds read in libXi's XListInputDevices() class parsing in  ...)
 	- libxi <unfixed> (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/1d5813ba0431b7e9a324a412e8b8ef532f65c5be
 CVE-2026-93545 (An out-of-bounds read in libXi's XListInputDevices() in libXi before 1 ...)
 	- libxi <unfixed> (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/2e5ecd1876a72e09aaeea87e1a8135ae764803d9
 CVE-2026-93544 (An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in li ...)
 	- libxi <unfixed> (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/e2ec4a1c8403c99f6c08621920b0efb0e0d6d533
 CVE-2026-93543 (An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8. ...)
 	- libxi <unfixed> (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f885619bb67f1ddec5d4e40ff3eff1a3269a0069
 CVE-2026-93542 (An out-of-bounds read in libXi's XI2 class parsing via size_classes()  ...)
 	- libxi <unfixed> (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/59f8dece822889f1db2b160775f9badbf810a734
 CVE-2026-93541 (An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1 ...)
 	- libxi <unfixed> (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)
 	[bookworm] - libxi <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/9a5f8636b9f3a2092ed845be6719abcf8f6bf383
 CVE-2026-93425 (Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior t ...)
 	NOT-FOR-US: Dokploy
 CVE-2026-93405 (Mailspring is a fast, cross-platform, open-source email client. Prior  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b65ee47272251534f54371027e177d4a48b6305

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b65ee47272251534f54371027e177d4a48b6305
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/5bab1b78/attachment.htm>