[Git][security-tracker-team/security-tracker][master] Add CVE-2026-88807/libxrender

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
759c01e7 by Salvatore Bonaccorso at 2026-09-22T16:37:08+02:00
Add CVE-2026-88807/libxrender

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -201,7 +201,8 @@ CVE-2026-89139 (Temporal Server compiles a Worker Controller Instance module int
 CVE-2026-88978 (Hatchet is a platform for orchestrating background tasks, AI agents, a ...)
 	NOT-FOR-US: Hatchet
 CVE-2026-88807 (A heap overflow in libXrender before 0.9.13 inRenderQueryPictFormats c ...)
-	TODO: check
+	- libxrender <unfixed>
+	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19
 CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 before  ...)
 	TODO: check
 CVE-2026-88788 (The Text Styler WordPress plugin through 1.1.1 does not sanitise and e ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/759c01e76cb976f7e726a96fca69c7d7d8000f58

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/759c01e76cb976f7e726a96fca69c7d7d8000f58
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260922/617c49f2/attachment.htm>