[Git][security-tracker-team/security-tracker][master] Add two more libxi issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
312964c7 by Salvatore Bonaccorso at 2026-10-27T15:46:00+01:00
Add two more libxi issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -46515,6 +46515,16 @@ CVE-2026-94604
 	REJECTED
 CVE-2026-94416 (An authorization bypass was found in the Ansible Automation Platform ( ...)
 	NOT-FOR-US: Red Hat Ansible Automation Platform
+CVE-2026-109090 [libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow]
+	- libxi 2:1.8.4-1
+	[trixie] - libxi <no-dsa> (Minor issue)
+	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b67034ace1abdf785fd8dcba7b6dc739d
+CVE-2026-109089 [libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow]
+	- libxi 2:1.8.4-1
+	[trixie] - libxi <no-dsa> (Minor issue)
+	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0f45e9e6c2c147c5dea4b6bc08231f2e
 CVE-2026-94282 (An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversi ...)
 	- libxi 2:1.8.4-1 (bug #1148965)
 	[trixie] - libxi <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/312964c743cd430f8dbdafbb874af0298d90aa30

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/312964c743cd430f8dbdafbb874af0298d90aa30
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/bb06e8b1/attachment.htm>