[Git][security-tracker-team/security-tracker][master] Add CVE-2026-88806/libx11

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
814ddbd3 by Salvatore Bonaccorso at 2026-09-22T16:41:15+02:00
Add CVE-2026-88806/libx11

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -204,7 +204,8 @@ CVE-2026-88807 (A heap overflow in libXrender before 0.9.13 inRenderQueryPictFor
 	- libxrender <unfixed>
 	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19
 CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 before  ...)
-	TODO: check
+	- libx11 <unfixed>
+	NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309
 CVE-2026-88788 (The Text Styler WordPress plugin through 1.1.1 does not sanitise and e ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-88756 (Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQ ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/814ddbd3f630cf1f09d0783d39e61232ffbcae12

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/814ddbd3f630cf1f09d0783d39e61232ffbcae12
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260922/81bb5cbf/attachment.htm>