Arnaud Rebillout pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e004f744 by Arnaud Rebillout at 2026-08-13T11:43:34+07:00
Reserve DLA-4738-1 for xorg-server
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -92690,7 +92690,6 @@ CVE-2026-34003 (A flaw was found in the X.Org X
server's XKB key types request v
- xorg-server 2:21.1.22-1
[trixie] - xorg-server 2:21.1.16-1.3+deb13u2
[bookworm] - xorg-server 2:21.1.7-3+deb12u12
- [bullseye] - xorg-server <postponed> (Minor issue)
- xwayland 2:24.1.10-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
@@ -92701,7 +92700,6 @@ CVE-2026-34002 (A flaw was found in the X.Org X server.
This vulnerability, an o
- xorg-server 2:21.1.22-1
[trixie] - xorg-server 2:21.1.16-1.3+deb13u2
[bookworm] - xorg-server 2:21.1.7-3+deb12u12
- [bullseye] - xorg-server <postponed> (Minor issue)
- xwayland 2:24.1.10-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
@@ -92711,7 +92709,6 @@ CVE-2026-34001 (A flaw was found in the X.Org X server.
This use-after-free vuln
- xorg-server 2:21.1.22-1
[trixie] - xorg-server 2:21.1.16-1.3+deb13u2
[bookworm] - xorg-server 2:21.1.7-3+deb12u12
- [bullseye] - xorg-server <postponed> (Minor issue)
- xwayland 2:24.1.10-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
@@ -92721,7 +92718,6 @@ CVE-2026-34000 (A flaw was found in the X.Org X server.
This out-of-bounds read
- xorg-server 2:21.1.22-1
[trixie] - xorg-server 2:21.1.16-1.3+deb13u2
[bookworm] - xorg-server 2:21.1.7-3+deb12u12
- [bullseye] - xorg-server <postponed> (Minor issue)
- xwayland 2:24.1.10-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
@@ -92731,7 +92727,6 @@ CVE-2026-33999 (A flaw was found in the X.Org X server.
This integer underflow v
- xorg-server 2:21.1.22-1
[trixie] - xorg-server 2:21.1.16-1.3+deb13u2
[bookworm] - xorg-server 2:21.1.7-3+deb12u12
- [bullseye] - xorg-server <postponed> (Minor issue)
- xwayland 2:24.1.10-1
[trixie] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
[bookworm] - xwayland <ignored> (Minor issue; Xwayland shouldn't be
running as root)
@@ -241353,7 +241348,6 @@ CVE-2024-13126 (The Download Manager WordPress plugin
before 3.3.07 doesn't prev
NOT-FOR-US: WordPress plugin
CVE-2022-49737 (In X.Org X server 20.11 through 21.1.16, when a client
application use ...)
- xorg-server 2:21.1.16-1.1 (bug #1081338)
- [bullseye] - xorg-server <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/xserver/-/issues/1260
NOTE:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/dc7cb45482cea6ccec22d117ca0b489500b4d0a0
(master)
NOTE:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/ba830583e6a8e9a78f09e2d723813c03142b11f6
(server-21.1-branch)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[13 Aug 2026] DLA-4738-1 xorg-server - security update
+ {CVE-2022-49737 CVE-2026-33999 CVE-2026-34000 CVE-2026-34001
CVE-2026-34002 CVE-2026-34003 CVE-2026-50256 CVE-2026-50257 CVE-2026-50258
CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
CVE-2026-50264}
+ [bullseye] - xorg-server 2:1.20.11-1+deb11u18
[13 Aug 2026] DLA-4737-1 xorg-server - security update
{CVE-2022-49737 CVE-2026-50256 CVE-2026-50257 CVE-2026-50258
CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263
CVE-2026-50264}
[bookworm] - xorg-server 2:21.1.7-3+deb12u13
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e004f7442237245efff58d3bcb66ac047368df6e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e004f7442237245efff58d3bcb66ac047368df6e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
