libXi-1.7.10-4.el8_10

エラータID: AXSA:2026-2251:04

Release date: 
Thursday, November 5, 2026 - 12:21
Subject: 
libXi-1.7.10-4.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

X.Org X11 libXi runtime library

Security Fix(es):

* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)
* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-109089
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
CVE-2026-109090
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

Solution: 

Update packages.

CVEs: 
CVE-2026-109089
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.
CVE-2026-109090
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.
Additional Info: 

N/A

Download: 

SRPMS
  1. libXi-1.7.10-4.el8_10.src.rpm
    MD5: 6e75253bcba39905681da500ba92821e
    SHA-256: e802053fa4516888300e169fc4ec2c4900ae0e5a1e30762591ebbe1d9a629985
    Size: 503.40 kB

Asianux Server 8 for x86_64
  1. libXi-1.7.10-4.el8_10.i686.rpm
    MD5: a56e2fbe3cb5aed3a22a3cbb8361e850
    SHA-256: a4c709f679acf2cea6b2bc3386274f1f179108b623529bfd4bd1f2869f935b36
    Size: 50.79 kB
  2. libXi-1.7.10-4.el8_10.x86_64.rpm
    MD5: 19a9778b5e66412deb531ea193c84891
    SHA-256: 0a29cd014ac70c068cb77abfff080d95766c255ef98b90fed1dcd5b859d18a6a
    Size: 48.48 kB
  3. libXi-devel-1.7.10-4.el8_10.i686.rpm
    MD5: 6ba98e9cb5ae69994c543cc4bf31394d
    SHA-256: e0bf5dc206d33ead81f54c31258a11ea7d04c97c512133925b496d71d3629d83
    Size: 110.80 kB
  4. libXi-devel-1.7.10-4.el8_10.x86_64.rpm
    MD5: e93c3cdbba482cd67d6de35af2363f6e
    SHA-256: 8faf6e20c9bd12b29a2d37fcf383abf4e4c83a86d68dfaf1fb1d45d012fb1fe8
    Size: 110.78 kB