Source: xorg-server Version: 2:21.1.25-2 X-Debbugs-CC: [email protected] Severity: grave Tags: security upstream
Hi, The following vulnerabilities were published for xorg-server. CVE-2026-109091[0]: | X.Org Server EDID DS_RANGES Out-Of-Bounds Write CVE-2026-109092[1]: | X.Org Server XvShmPutImage Shared-Memory Bounds Overflow CVE-2026-109093[2]: | X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write CVE-2026-109904[3]: | X.Org Server XRes QueryClientIds Request Size Overflow CVE-2026-109094[4]: | X.Org Server XRes QueryResourceBytes Swap Path Size Overflow CVE-2026-109095[5]: | X.Org Server glamor Xv Image Size Integer Overflow CVE-2026-109096[6]: | X.Org Server XvPutImage Negative Image Size Length Bypass CVE-2026-109903[7]: | X.Org Server XvQueryImageAttributes Negative Size Reply If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-109091 https://www.cve.org/CVERecord?id=CVE-2026-109091 [1] https://security-tracker.debian.org/tracker/CVE-2026-109092 https://www.cve.org/CVERecord?id=CVE-2026-109092 [2] https://security-tracker.debian.org/tracker/CVE-2026-109093 https://www.cve.org/CVERecord?id=CVE-2026-109093 [3] https://security-tracker.debian.org/tracker/CVE-2026-109904 https://www.cve.org/CVERecord?id=CVE-2026-109904 [4] https://security-tracker.debian.org/tracker/CVE-2026-109094 https://www.cve.org/CVERecord?id=CVE-2026-109094 [5] https://security-tracker.debian.org/tracker/CVE-2026-109095 https://www.cve.org/CVERecord?id=CVE-2026-109095 [6] https://security-tracker.debian.org/tracker/CVE-2026-109096 https://www.cve.org/CVERecord?id=CVE-2026-109096 [7] https://security-tracker.debian.org/tracker/CVE-2026-109903 https://www.cve.org/CVERecord?id=CVE-2026-109903 [8] https://lists.x.org/archives/xorg-announce/2026-November/003759.html Please adjust the affected versions in the BTS as needed. Regards, Salvatore
