Thorsten Alteholz pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
2b0d6102 by Thorsten Alteholz at 2026-09-27T19:25:06+02:00
mark several CVEs of libxi as postponed for Bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3077,30 +3077,37 @@ CVE-2026-94416 (An authorization bypass was found in 
the Ansible Automation Plat
 CVE-2026-94282
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-94281 (An out-of-bounds read in libXi's XListInputDevices() class 
parsing in  ...)
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-93545 (An out-of-bounds read in libXi's XListInputDevices() in libXi 
before 1 ...)
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-93544 (An out-of-bounds read in libXi's XI2 XIQueryDevice reply 
parsing in li ...)
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-93543 (An out-of-bounds read in libXi's XI2 class parser in libXi 
before 1.8. ...)
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-93542 (An out-of-bounds read in libXi's XI2 class parsing via 
size_classes()  ...)
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-93541 (An out-of-bounds read in libXi's XQueryDeviceState() in libXi 
before 1 ...)
        - libxi <unfixed> (bug #1148965)
        [trixie] - libxi <no-dsa> (Minor issue)
+       [bookworm] - libxi <postponed> (Minor issue)
        NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
 CVE-2026-93425 (Dokploy is a free, self-hostable Platform as a Service (PaaS). 
Prior t ...)
        NOT-FOR-US: Dokploy



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b0d6102d5e4994a1c94f3deda386629ae949df1

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b0d6102d5e4994a1c94f3deda386629ae949df1
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to