git: 9e27610c2747 - main - security/vuxml: document x11/libXrender vulnerability
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 17 Oct 2026 12:43:10 UTC
The branch main has been updated by osa:
URL: https://cgit.FreeBSD.org/ports/commit/?id=9e27610c2747a4c599ddbd629a8e01110e4bfb24
commit 9e27610c2747a4c599ddbd629a8e01110e4bfb24
Author: Sergey A. Osokin <osa@FreeBSD.org>
AuthorDate: 2026-10-17 12:41:39 +0000
Commit: Sergey A. Osokin <osa@FreeBSD.org>
CommitDate: 2026-10-17 12:41:39 +0000
security/vuxml: document x11/libXrender vulnerability
---
security/vuxml/vuln/2026.xml | 32 +++++++++++++++++++++++++++++++-
1 file changed, 31 insertions(+), 1 deletion(-)
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 3480618ed1c4..571728819688 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,34 @@
+ <vuln vid="8c6ec104-ca27-11f1-ada1-ac5afc632ba3">
+ <topic>libXrender -- vulnerability</topic>
+ <affects>
+<package>
+<name>libXrender</name>
+<range><lt>0.9.13</lt></range>
+</package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>X.Org reports:</p>
+ <blockquote cite="https://lists.x.org/archives/xorg-announce/2026-October/003752.html">
+ <p>Multiple issues have been found in the X client library
+ implementations published by X.Org for which we are
+ releasing security fixes for.</p>
+ <ul>
+ <li>CVE-2026-88807: Out-of-bounds read in libXrender's XRenderQueryFormat reply parser</li>
+ </ul>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2026-88807</cvename>
+ <url>https://lists.x.org/archives/xorg-announce/2026-October/003752.html</url>
+ </references>
+ <dates>
+ <discovery>2026-10-17</discovery>
+ <entry>2026-10-17</entry>
+ </dates>
+ </vuln>
+
<vuln vid="d4bc120a-ca26-11f1-ada1-ac5afc632ba3">
<topic>libXpm -- vulnerability</topic>
<affects>
@@ -8,7 +39,6 @@
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
- <p>SO-AND-SO reports:</p>
<p>X.Org reports:</p>
<blockquote cite="https://lists.x.org/archives/xorg-announce/2026-October/003752.html">
<p>Multiple issues have been found in the X client library