Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7b577b9b by Salvatore Bonaccorso at 2026-10-10T10:20:26+02:00
Reference upstream commits for libx11 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14085,16 +14085,19 @@ CVE-2026-94285 (An out-of-bounds read in libX11's
byte-oriented codeset parser i
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/797eaf0bd69524144e0df7af516b680f4b7694e9
CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM
trigger-key regist ...)
- libx11 <unfixed> (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/924fc91f08ece9cddc93609b4dc945a9cc90ea12
CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input
Method) a ...)
- libx11 <unfixed> (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/f263bbca24d04c766775e7af2e203ca41b4ece2e
CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP
Request/Response S ...)
NOT-FOR-US: elixir-mint Mint
CVE-2026-93540 (A privilege mismatch was found in Fleet. When a bundle
requested names ...)
@@ -22933,6 +22936,7 @@ CVE-2026-88806 (A malicious X server could exploit a
buffer overflow in libX11 b
[trixie] - libx11 <no-dsa> (Minor issue)
[bookworm] - libx11 <postponed> (Minor issue)
NOTE:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/6d4432b13c0b3b6a644c13de9c793a14db48d545
CVE-2026-88788 (The Text Styler WordPress plugin through 1.1.1 does not
sanitise and e ...)
NOT-FOR-US: WordPress plugin
CVE-2026-88756 (Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to
perform SQ ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b577b9b9003e2f5c222d154b86a69b04bdc36a1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7b577b9b9003e2f5c222d154b86a69b04bdc36a1
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
