Red Hat Security Advisory

RHSA-2026:93594

Red Hat Hardened Images RPMs Security Update

Released 2026-11-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images libXtst-1.2.5-5.3.hum1@aarch64, libXtst-1.2.5-5.3.hum1@s390x, libXtst-1.2.5-5.3.hum1@src +4

Fixes 1 record

TI-2026-81420 CVE-2026-109088 · GHSA-4rpx-8967-p725

Endless loop in libXtst RECORD EnableContext reply handling

LOW 29

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00272 Published 2026-10-27 Partial fix · 1.2.6 CWE-835