[Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-94286

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 10 09:24:19 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2babef64 by Salvatore Bonaccorso at 2026-10-10T10:23:51+02:00
Reference upstream commit for CVE-2026-94286

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14080,6 +14080,7 @@ CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXts
 	[trixie] - libxtst <no-dsa> (Minor issue)
 	[bookworm] - libxtst <postponed> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/commit/b84737d8400db7f06293822838d0e1c374cf71c4
 CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser in libX ...)
 	- libx11 <unfixed> (bug #1149668)
 	[trixie] - libx11 <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2babef64d12cb82c2f7cc8688661e10dc5d8f0d6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2babef64d12cb82c2f7cc8688661e10dc5d8f0d6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/30d78ea2/attachment.htm>


More information about the debian-security-tracker-commits mailing list