[Git][security-tracker-team/security-tracker][master] Add another batch of upstream advisory reference for X library issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5cc1255a by Salvatore Bonaccorso at 2026-10-27T15:49:02+01:00
Add another batch of upstream advisory reference for X library issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42265,12 +42265,14 @@ CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write pat
 	- libxpm 1:3.5.20-1 (bug #1149666)
 	[trixie] - libxpm <no-dsa> (Minor issue)
 	[bookworm] - libxpm <postponed> (Minor issue)
+	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
 CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)
 	- libxtst 2:1.2.6-1 (bug #1149667)
 	[trixie] - libxtst <no-dsa> (Minor issue)
 	[bookworm] - libxtst <postponed> (Minor issue)
+	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/commit/b84737d8400db7f06293822838d0e1c374cf71c4
 CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser in libX ...)
@@ -51201,6 +51203,7 @@ CVE-2026-88807 (A heap overflow in libXrender before 0.9.13 inRenderQueryPictFor
 	- libxrender 1:0.9.13-1 (bug #1148735)
 	[trixie] - libxrender <no-dsa> (Minor issue)
 	[bookworm] - libxrender <postponed> (Minor issue)
+	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19
 CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 before  ...)
 	- libx11 2:1.8.14-1 (bug #1148733)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5cc1255a28e6a1d09e35d511ac99d3275f585b0a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5cc1255a28e6a1d09e35d511ac99d3275f585b0a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/a30932b8/attachment.htm>