git: 7c00ab4d2594 - main - security/vuxml: document x11/libX11 vulnerabilities
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 17 Oct 2026 12:23:17 UTC
The branch main has been updated by osa:
URL: https://cgit.FreeBSD.org/ports/commit/?id=7c00ab4d2594d21891d3a3e715023c136b248efd
commit 7c00ab4d2594d21891d3a3e715023c136b248efd
Author: Sergey A. Osokin <osa@FreeBSD.org>
AuthorDate: 2026-10-17 12:21:06 +0000
Commit: Sergey A. Osokin <osa@FreeBSD.org>
CommitDate: 2026-10-17 12:22:10 +0000
security/vuxml: document x11/libX11 vulnerabilities
---
security/vuxml/vuln/2026.xml | 37 +++++++++++++++++++++++++++++++++++++
1 file changed, 37 insertions(+)
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index c2ea66a4ece7..862e2f5d27e4 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,40 @@
+ <vuln vid="fbf59c13-ca23-11f1-ada1-ac5afc632ba3">
+ <topic>libX11 -- multiple vulnerabilities</topic>
+ <affects>
+<package>
+<name>libX11</name>
+<range><lt>1.8.14</lt></range>
+</package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>X.Org reports:</p>
+ <blockquote cite="https://lists.x.org/archives/xorg-announce/2026-October/003752.html">
+ <p>Multiple issues have been found in the X client library
+ implementations published by X.Org for which we are
+ releasing security fixes for.</p>
+ <ul>
+ <li>CVE-2026-88806: Out-of-bounds write vulnerability in libX11's XKB (X Keyboard Extension) action parser</li>
+ <li>CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser</li>
+ <li>CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser</li>
+ <li>CVE-2026-94285: Out-of-bounds read in libX11's byte-oriented codeset parser</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2026-88806</cvename>
+ <cvename>CVE-2026-94283</cvename>
+ <cvename>CVE-2026-94284</cvename>
+ <cvename>CVE-2026-94285</cvename>
+ <url>https://lists.x.org/archives/xorg-announce/2026-October/003752.html</url>
+ </references>
+ <dates>
+ <discovery>2026-10-17</discovery>
+ <entry>2026-10-17</entry>
+ </dates>
+ </vuln>
+
<vuln vid="83f5b20f-4429-4ee1-a764-66a231ed9dab">
<topic>mod_wsgi -- race condition at process start can leak request context between requests</topic>
<affects>