Red Hat Security AdvisoryRHSA-2026:93441
libXi security update
Released 2026-11-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) libXi-1.8.1-7.el10_2.3, libXi-devel-1.8.1-7.el10_2.3
Fixes 2 records
Priority LOW 34
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00258 · Published 2026-10-27 · Partial fix · 1.8.4 CWE-122
Priority LOW 34
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00258 · Published 2026-10-27 · Partial fix · 1.8.4 CWE-122
