[Git][security-tracker-team/security-tracker][master] Add fixed versions for various X libraries
Emilio Pozuelo Monfort (@pochu)
pochu at debian.org
Tue Oct 27 08:27:18 GMT 2026
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
bc8f0267 by Emilio Pozuelo Monfort at 2026-10-27T09:25:13+01:00
Add fixed versions for various X libraries
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -42217,31 +42217,31 @@ CVE-2026-96538 (WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missin
CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi prod ...)
NOT-FOR-US: BUFFALO
CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write path in l ...)
- - libxpm <unfixed> (bug #1149666)
+ - libxpm 1:3.5.20-1 (bug #1149666)
[trixie] - libxpm <no-dsa> (Minor issue)
[bookworm] - libxpm <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)
- - libxtst <unfixed> (bug #1149667)
+ - libxtst 2:1.2.6-1 (bug #1149667)
[trixie] - libxtst <no-dsa> (Minor issue)
[bookworm] - libxtst <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/commit/b84737d8400db7f06293822838d0e1c374cf71c4
CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser in libX ...)
- - libx11 <unfixed> (bug #1149668)
+ - libx11 2:1.8.14-1 (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/797eaf0bd69524144e0df7af516b680f4b7694e9
CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM trigger-key regist ...)
- - libx11 <unfixed> (bug #1149668)
+ - libx11 2:1.8.14-1 (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/924fc91f08ece9cddc93609b4dc945a9cc90ea12
CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input Method) a ...)
- - libx11 <unfixed> (bug #1149668)
+ - libx11 2:1.8.14-1 (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
@@ -46468,43 +46468,43 @@ CVE-2026-94604
CVE-2026-94416 (An authorization bypass was found in the Ansible Automation Platform ( ...)
NOT-FOR-US: Red Hat Ansible Automation Platform
CVE-2026-94282 (An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversi ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/8caed97a3e356ff5827704f3c28aed0d50d9136d
CVE-2026-94281 (An out-of-bounds read in libXi's XListInputDevices() class parsing in ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/1d5813ba0431b7e9a324a412e8b8ef532f65c5be
CVE-2026-93545 (An out-of-bounds read in libXi's XListInputDevices() in libXi before 1 ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/2e5ecd1876a72e09aaeea87e1a8135ae764803d9
CVE-2026-93544 (An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in li ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/e2ec4a1c8403c99f6c08621920b0efb0e0d6d533
CVE-2026-93543 (An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8. ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f885619bb67f1ddec5d4e40ff3eff1a3269a0069
CVE-2026-93542 (An out-of-bounds read in libXi's XI2 class parsing via size_classes() ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/59f8dece822889f1db2b160775f9badbf810a734
CVE-2026-93541 (An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1 ...)
- - libxi <unfixed> (bug #1148965)
+ - libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
@@ -51133,12 +51133,12 @@ CVE-2026-89139 (Temporal Server compiles a Worker Controller Instance module int
CVE-2026-88978 (Hatchet is a platform for orchestrating background tasks, AI agents, a ...)
NOT-FOR-US: Hatchet
CVE-2026-88807 (A heap overflow in libXrender before 0.9.13 inRenderQueryPictFormats c ...)
- - libxrender <unfixed> (bug #1148735)
+ - libxrender 1:0.9.13-1 (bug #1148735)
[trixie] - libxrender <no-dsa> (Minor issue)
[bookworm] - libxrender <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19
CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 before ...)
- - libx11 <unfixed> (bug #1148733)
+ - libx11 2:1.8.14-1 (bug #1148733)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bc8f0267e3a1c6d81d0ec8cdfd2aa43cab952759
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bc8f0267e3a1c6d81d0ec8cdfd2aa43cab952759
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/95ec916e/attachment.htm>
More information about the debian-security-tracker-commits
mailing list