Red Hat Security Advisory

RHSA-2026:91004

libXi security update

Released 2026-10-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) libXi-1.8.1-7.el10_2.1, libXi-devel-1.8.1-7.el10_2.1

TI-2026-63023 CVE-2026-93543 · GHSA-r63g-v8rx-c2hg

LOW 32

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00262 Published 2026-09-24 Partial fix · 1.8.4 CWE-125