libXi-1.7.10-8.el9_8.3

エラータID: AXSA:2026-2243:03

Release date: 
Wednesday, November 4, 2026 - 19:10
Subject: 
libXi-1.7.10-8.el9_8.3
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

X.Org X11 libXi runtime library

Security Fix(es):

* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)
* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-109089
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
CVE-2026-109090
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libXi-1.7.10-8.el9_8.3.src.rpm
    MD5: 827b48ccc781ff746336dad6134f0764
    SHA-256: be74354f2fa880dc00b606f5c35dfe46d16980d26e55b72b7f042dfa6dbc2814
    Size: 493.13 kB

Asianux Server 9 for x86_64
  1. libXi-1.7.10-8.el9_8.3.i686.rpm
    MD5: be1a702bf21f0876f9a769aef764c702
    SHA-256: 108e3ba54c2aebbb53811b503018c5b520399d40037bea874714ab82042c0cc1
    Size: 40.89 kB
  2. libXi-1.7.10-8.el9_8.3.x86_64.rpm
    MD5: bc2882ddb8e57a0f2e9118e49845f24b
    SHA-256: a150c0ec949437b0d1228303b1ce83f092812b833784ad81ffd0b22a9ce027cf
    Size: 38.62 kB
  3. libXi-devel-1.7.10-8.el9_8.3.i686.rpm
    MD5: d34c8763ccae683687aa0e97cd1c1469
    SHA-256: e3e34eea078899108e042353f26ef19be2aea9121d7390d1c172fb99d8a9b4b9
    Size: 117.07 kB
  4. libXi-devel-1.7.10-8.el9_8.3.x86_64.rpm
    MD5: 73e72d6035e080bfe70187c626aab02a
    SHA-256: d267de1f2a2c95df694e41280df46a6890b9f08f513906c8fe66c49a99795fa4
    Size: 117.03 kB