libXi-1.7.10-8.el9_8.3
エラータID: AXSA:2026-2243:03
X.Org X11 libXi runtime library
Security Fix(es):
* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)
* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-109089
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
CVE-2026-109090
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
Update packages.
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
N/A
SRPMS
- libXi-1.7.10-8.el9_8.3.src.rpm
MD5: 827b48ccc781ff746336dad6134f0764
SHA-256: be74354f2fa880dc00b606f5c35dfe46d16980d26e55b72b7f042dfa6dbc2814
Size: 493.13 kB
Asianux Server 9 for x86_64
- libXi-1.7.10-8.el9_8.3.i686.rpm
MD5: be1a702bf21f0876f9a769aef764c702
SHA-256: 108e3ba54c2aebbb53811b503018c5b520399d40037bea874714ab82042c0cc1
Size: 40.89 kB - libXi-1.7.10-8.el9_8.3.x86_64.rpm
MD5: bc2882ddb8e57a0f2e9118e49845f24b
SHA-256: a150c0ec949437b0d1228303b1ce83f092812b833784ad81ffd0b22a9ce027cf
Size: 38.62 kB - libXi-devel-1.7.10-8.el9_8.3.i686.rpm
MD5: d34c8763ccae683687aa0e97cd1c1469
SHA-256: e3e34eea078899108e042353f26ef19be2aea9121d7390d1c172fb99d8a9b4b9
Size: 117.07 kB - libXi-devel-1.7.10-8.el9_8.3.x86_64.rpm
MD5: 73e72d6035e080bfe70187c626aab02a
SHA-256: d267de1f2a2c95df694e41280df46a6890b9f08f513906c8fe66c49a99795fa4
Size: 117.03 kB