[Git][security-tracker-team/security-tracker][master] Add CVE-2026-94287/libxpm

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2ec3d98f by Salvatore Bonaccorso at 2026-09-28T21:45:09+02:00
Add CVE-2026-94287/libxpm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14,7 +14,9 @@ CVE-2026-96538 (WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missin
 CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi prod ...)
 	NOT-FOR-US: BUFFALO
 CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write path in l ...)
-	TODO: check
+	- libxpm <unfixed>
+	NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
+	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
 CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)
 	TODO: check
 CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser in libX ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ec3d98f4ab3aae6e84794f8347a3291fbc58ec6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ec3d98f4ab3aae6e84794f8347a3291fbc58ec6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/38a02db5/attachment.htm>