Cyber ·
X.Org: three CVEs for client libraries may be made public
On 27 October 2026, a message on the oss-sec list said three CVEs tied to the X.Org security advisory may now be made public, since the notification to the CNA may not yet be complete.
According to the message posted on the oss-sec discussion list, the author asked the responsible team to tell the CNA, the CVE numbering authority, that three identifiers from the X.Org security advisory may now be made public. The author says they know of no specific reason for disclosure and assumes that this step has not yet been completed by the team members who obtained the CVEs.
The text is an automatic translation of a message dated 27 October 2026 covering multiple security problems in X.Org client libraries. To consult the original, use the public oss-sec archive and search for the advisory title and the CVE identifiers. Before acting, confirm the technical details, affected versions and fixes in the official X.Org advisory.