[Git][security-tracker-team/security-tracker][master] Add CVE-2026-109088/libxtst

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c894d66c by Salvatore Bonaccorso at 2026-10-27T15:51:06+01:00
Add CVE-2026-109088/libxtst

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42268,6 +42268,12 @@ CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write pat
 	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
+CVE-2026-109088 [libXtst RECORD EnableContext Reply Endless Loop]
+	- libxtst 2:1.2.6-1
+	[trixie] - libxtst <no-dsa> (Minor issue)
+	NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
+	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/11
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/commit/ac60f5f474bc6440332a88225763a71cdbaed570
 CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)
 	- libxtst 2:1.2.6-1 (bug #1149667)
 	[trixie] - libxtst <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c894d66c948c3bec40cf1b166d70cd1db0cc42f7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c894d66c948c3bec40cf1b166d70cd1db0cc42f7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/f7990124/attachment.htm>