Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9b65ee47 by Salvatore Bonaccorso at 2026-10-10T10:23:00+02:00
Reference upstream commits for libxi issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18282,36 +18282,43 @@ CVE-2026-94282 (An out-of-bounds read in libXi's XI2
enter/leave/focus cookie co
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/8caed97a3e356ff5827704f3c28aed0d50d9136d
CVE-2026-94281 (An out-of-bounds read in libXi's XListInputDevices() class
parsing in ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/1d5813ba0431b7e9a324a412e8b8ef532f65c5be
CVE-2026-93545 (An out-of-bounds read in libXi's XListInputDevices() in libXi
before 1 ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/2e5ecd1876a72e09aaeea87e1a8135ae764803d9
CVE-2026-93544 (An out-of-bounds read in libXi's XI2 XIQueryDevice reply
parsing in li ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/e2ec4a1c8403c99f6c08621920b0efb0e0d6d533
CVE-2026-93543 (An out-of-bounds read in libXi's XI2 class parser in libXi
before 1.8. ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f885619bb67f1ddec5d4e40ff3eff1a3269a0069
CVE-2026-93542 (An out-of-bounds read in libXi's XI2 class parsing via
size_classes() ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/59f8dece822889f1db2b160775f9badbf810a734
CVE-2026-93541 (An out-of-bounds read in libXi's XQueryDeviceState() in libXi
before 1 ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/9a5f8636b9f3a2092ed845be6719abcf8f6bf383
CVE-2026-93425 (Dokploy is a free, self-hostable Platform as a Service (PaaS).
Prior t ...)
NOT-FOR-US: Dokploy
CVE-2026-93405 (Mailspring is a fast, cross-platform, open-source email
client. Prior ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b65ee47272251534f54371027e177d4a48b6305
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b65ee47272251534f54371027e177d4a48b6305
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
