CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

x11/libXi 1.8.4,1

X Input extension library

0
unaddressed
0
VuXML only
10
fixed
0
open problem reports

Port info

Maintainer
x11@FreeBSD.org
Packages
latest: 1.8.4,1
Upstream
up to date
Last update
to 1.8.4,1 · ac1dc066fa
Quarterly
2026Q4: 1.8.4,1 · last MFH a323a1250e
WWW
https://www.freedesktop.org/wiki/Software/xlibs/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install libXi
installs 1.8.4,1 from latest; from quarterly (2026Q4) 1.8.4,1
Port
# cd /usr/ports/x11/libXi && make install clean
Size
131 KiB download · 355 KiB installed
Depends on
x11/libX11 1.8.14,1, x11/libXext 1.3.7,1, x11/libXfixes 6.0.2
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.8.4,11.8.3,1–
FreeBSD 151.8.4,11.8.4,1–
FreeBSD 141.8.4,11.8.3,11.8.4,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.8.4,11.8.3,1–
FreeBSD 141.8.4,11.8.3,11.8.4,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.8.4,1.

Fixed (10)

Show 10 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-935437.42026-09-24An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
CVE-2026-942816.52026-09-24An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
CVE-2026-935456.52026-09-24An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
CVE-2026-935446.52026-09-24An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.
CVE-2026-935426.52026-09-24An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.
CVE-2026-935416.52026-09-24An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a
CVE-2026-942825.62026-09-28An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.
xorg -- protocol handling issues in X Window System client librariesentered 2013-06-04

CVE-2013-1981, CVE-2013-1982, CVE-2013-1983, CVE-2013-1984, CVE-2013-1985, CVE-2013-1986, CVE-2013-1987, CVE-2013-1988, CVE-2013-1989, CVE-2013-1990, CVE-2013-1991, CVE-2013-1992, CVE-2013-1993, CVE-2013-1994, CVE-2013-1995, CVE-2013-1996, CVE-2013-1997, CVE-2013-1998, CVE-2013-1999, CVE-2013-2000, CVE-2013-2001, CVE-2013-2002, CVE-2013-2003, CVE-2013-2004, CVE-2013-2005, CVE-2013-2062, CVE-2013-2063, CVE-2013-2064, CVE-2013-2066

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (60)

Tilman Keskinoz (arved) · 6.0.1_2
Use the right MTREE_FILE

Reported by:	kris
eea2b2f9ca
Trevor Johnson (trevor) · 6.0.1_2
SIZEify (maintainer timeout)
8232e82f85
Michael Nottebrock (lofi) · 6.0.1_2
Declare CONFLICTS between freedesktop.org X extension/library ports and XFree86-libraries.
d5f131c7fd
Ade Lovett (ade) · 6.0.1_2
Whoa there, boy, that's a mighty big commit y'all have there...

Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".

For ports-in-waiting:

	USE_LIBTOOL=YES		->	USE_LIBTOOL_VER=13
	USE_AUTOCONF=YES	->	USE_AUTOCONF_VER=213
	USE_AUTOMAKE=YES	->	USE_AUTOMAKE_VER=14

Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
3f651573ad
Joe Marcus Clarke (marcus) · 6.0.1_2
Add a missing dependency on xextensions.

Reported by:	bento
d61b23997f
Kris Kennaway (kris) · 6.0.1_1
BROKEN: Does not compile
27c751abb8
Joe Marcus Clarke (marcus) · 6.0.1_1
Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)
73f7c91b5d
Eric Anholt (anholt) · 6.0.1
Update to 6.0.1
31622f61b0
Eric Anholt (anholt) · 6.0.1.p1
Note: Unless you hit "Save," your changes don't take effect. This is the Input extension library, not the Damage extension library.
504af8c2aa
Eric Anholt (anholt) · 6.0.1.p1
New port: Prerelease version of libXi from freedesktop.org: X Input extension library

Testing is encouraged, but please do not use these ports as dependencies until
they are updated to release tarballs and the XFree86 ports have been updated to
depend on them.
986e4c9ac5
« newest← newerpage 2 of 2