[CLSA-2026:1791489887] Fix CVE(s): CVE-2026-94284, CVE-2026-94285
Type:
security
Severity:
Important
Release date:
2026-10-08 20:04:58 UTC
Description:
* SECURITY UPDATE: out-of-bounds read in XIM trigger-key registration - debian/patches/CVE-2026-94284.patch: pass the remaining payload length to _XimRegisterTriggerkey() and reject on-keys/off-keys lengths that do not fit before copying - CVE-2026-94284 * SECURITY UPDATE: out-of-bounds read in byte-oriented codeset parsing - debian/patches/CVE-2026-94285.patch: pass the remaining input length to byteM_parse_codeset() and skip codesets longer than the available bytes - CVE-2026-94285
Updated packages:
  • libx11-6_1.7.2-1+deb11u2+tuxcare.els2_amd64.deb
    sha:7a28806edbc59d4d4236f949cde194155df255cb
  • libx11-data_1.7.2-1+deb11u2+tuxcare.els2_all.deb
    sha:31605d890f6d91a4ea2e1d2478ebe305a9f93c0e
  • libx11-dev_1.7.2-1+deb11u2+tuxcare.els2_amd64.deb
    sha:a87f4b5f2454daf32aa8eb23f4c39b037ec34582
  • libx11-doc_1.7.2-1+deb11u2+tuxcare.els2_all.deb
    sha:dd91e347afcff1c34c372245180cede661f6671c
  • libx11-xcb-dev_1.7.2-1+deb11u2+tuxcare.els2_amd64.deb
    sha:66d502f988ec14eb4ac0444a7d852af993a40b3f
  • libx11-xcb1_1.7.2-1+deb11u2+tuxcare.els2_amd64.deb
    sha:f460ed74d33ee4dd21f616c1540f14a1194e4e5b
  • libx11-6_1.7.2-1+deb11u2+tuxcare.els2_arm64.deb
    sha:2a28f3f58634542fc5ae62fe03b03dcad3a6ec66
  • libx11-dev_1.7.2-1+deb11u2+tuxcare.els2_arm64.deb
    sha:7f282d57a81e239a92c6938586c7503463513472
  • libx11-xcb-dev_1.7.2-1+deb11u2+tuxcare.els2_arm64.deb
    sha:192aadf835143c598aa9c71bf1837d62580c4b65
  • libx11-xcb1_1.7.2-1+deb11u2+tuxcare.els2_arm64.deb
    sha:5bb1606b5915f2362a62c989ae0495824fe2b8f7
  • libx11-6_1.7.2-1+deb11u2+tuxcare.els2_armel.deb
    sha:3dfec943d0c44a081496ae99d9020ca78d0069f8
  • libx11-dev_1.7.2-1+deb11u2+tuxcare.els2_armel.deb
    sha:f542e23e1c4fc94b032be73f2d312afdd425a59b
  • libx11-xcb-dev_1.7.2-1+deb11u2+tuxcare.els2_armel.deb
    sha:e7685291c8048416700496028e553685e8c95d06
  • libx11-xcb1_1.7.2-1+deb11u2+tuxcare.els2_armel.deb
    sha:627d7ed61da45d11b93e4c688f11ac3d297b83a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.