ELSA-2026-93438

ELSA-2026-93438 - libXi security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-02

Description

[1.7.10-4]
- CVE-2026-109089 libXi: libXi: Arbitrary code execution via
DEVICE_RESOLUTION heap-based buffer overflow
Resolves: RHEL-293443

[1.7.10-3]
- CVE-2026-109090 libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
Resolves: RHEL-293385

Related CVEs

CVE-2026-109089

CVE-2026-109090

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libXi-1.7.10-4.el8_10.src.rpm	510e869034bff688c3b2aa823a3d48478d7740cac55e315c6760909baebdc5b3	-	ol8_aarch64_appstream
	libXi-1.7.10-4.el8_10.aarch64.rpm	1e24cf39b866884d830853be79732d20682297b2399b1003c57807cf7a47a601	-	ol8_aarch64_appstream
	libXi-devel-1.7.10-4.el8_10.aarch64.rpm	389e7c4340086a9315625c1643a7c600a948076f772cdd411054e5ac29e8e793	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	libXi-1.7.10-4.el8_10.src.rpm	510e869034bff688c3b2aa823a3d48478d7740cac55e315c6760909baebdc5b3	-	ol8_x86_64_appstream
	libXi-1.7.10-4.el8_10.i686.rpm	36e1c65648e86ebb9e7efb96fa86c68a62d42e2e7980ae2d8d00ffbba9ca4a56	-	ol8_x86_64_appstream
	libXi-1.7.10-4.el8_10.x86_64.rpm	73b56853eb5b0f923aa543239480458b938c0708ba9df2d9c114089cfdc5f646	-	ol8_x86_64_appstream
	libXi-devel-1.7.10-4.el8_10.i686.rpm	18773e0bf8e22cd6a6b27820eac88363d1b4ce3d3c8f9bd146ed47c1905dbf4c	-	ol8_x86_64_appstream
	libXi-devel-1.7.10-4.el8_10.x86_64.rpm	c6c9ba50ced6c0520ecbf9593da40fb32e1b6eb83c29a3e17b61471ee1cdc112	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team