[Git][security-tracker-team/security-tracker][master] Add advisory references for X libraries from update in october
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 27 14:46:02 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9fa5a916 by Salvatore Bonaccorso at 2026-10-27T15:45:08+01:00
Add advisory references for X libraries from update in october
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -42277,18 +42277,21 @@ CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser i
- libx11 2:1.8.14-1 (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/797eaf0bd69524144e0df7af516b680f4b7694e9
CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM trigger-key regist ...)
- libx11 2:1.8.14-1 (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/924fc91f08ece9cddc93609b4dc945a9cc90ea12
CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input Method) a ...)
- libx11 2:1.8.14-1 (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/f263bbca24d04c766775e7af2e203ca41b4ece2e
CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
@@ -46516,42 +46519,49 @@ CVE-2026-94282 (An out-of-bounds read in libXi's XI2 enter/leave/focus cookie co
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/8caed97a3e356ff5827704f3c28aed0d50d9136d
CVE-2026-94281 (An out-of-bounds read in libXi's XListInputDevices() class parsing in ...)
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/1d5813ba0431b7e9a324a412e8b8ef532f65c5be
CVE-2026-93545 (An out-of-bounds read in libXi's XListInputDevices() in libXi before 1 ...)
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/2e5ecd1876a72e09aaeea87e1a8135ae764803d9
CVE-2026-93544 (An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in li ...)
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/e2ec4a1c8403c99f6c08621920b0efb0e0d6d533
CVE-2026-93543 (An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8. ...)
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f885619bb67f1ddec5d4e40ff3eff1a3269a0069
CVE-2026-93542 (An out-of-bounds read in libXi's XI2 class parsing via size_classes() ...)
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/59f8dece822889f1db2b160775f9badbf810a734
CVE-2026-93541 (An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1 ...)
- libxi 2:1.8.4-1 (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/9a5f8636b9f3a2092ed845be6719abcf8f6bf383
CVE-2026-93425 (Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior t ...)
@@ -51186,6 +51196,7 @@ CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 b
- libx11 2:1.8.14-1 (bug #1148733)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
+ NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/6d4432b13c0b3b6a644c13de9c793a14db48d545
CVE-2026-88788 (The Text Styler WordPress plugin through 1.1.1 does not sanitise and e ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fa5a916dad07d34cba5edd02508c06b5a7ea6f0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fa5a916dad07d34cba5edd02508c06b5a7ea6f0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/b45914af/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list