[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <0e0480d1-c90c-4445-b74f-ed13188f6a60@oracle.com>
Date: Tue, 27 Oct 2026 08:31:28 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: Emilio Pozuelo Monfort <pochu@...ian.org>, oss-security@...ts.openwall.com
Subject: Re: Fwd: X.Org Security Advisory: multiple security
issues in X.Org X client libraries
On 10/27/26 01:33, Emilio Pozuelo Monfort wrote:
> Hi Alan,
>
> On 16/10/2026 23:53, Alan Coopersmith wrote:
>> All five library releases are available now, see
>> https://lists.x.org/archives/xorg-announce/2026-October/thread.html
>> for links to their release announcements.
>
> Some of these (CVE-2026-109089, CVE-2026-109090, CVE-2026-109088) are still
> marked as RESERVED in MITRE, with no information published (e.g. [1]). Do you
> know why?
I don't know of any specific reason - I've asked our team members who got the
CVEs assigned to let the CNA know that they can make them public now, assuming
this step hasn't been completed yet.
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
