Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2ec3d98f by Salvatore Bonaccorso at 2026-09-28T21:45:09+02:00
Add CVE-2026-94287/libxpm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14,7 +14,9 @@ CVE-2026-96538 (WarehousePG (WHPG) 7.x before 7.6.0-WHPG is
affected by a missin
CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO
Wi-Fi prod ...)
NOT-FOR-US: BUFFALO
CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write
path in l ...)
- TODO: check
+ - libxpm <unfixed>
+ NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in
libXtst befo ...)
TODO: check
CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser
in libX ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ec3d98f4ab3aae6e84794f8347a3291fbc58ec6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ec3d98f4ab3aae6e84794f8347a3291fbc58ec6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
