ELSA-2026-93439

ELSA-2026-93439 - libXi security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-02

Description

[1.7.10-8.3]
- CVE-2026-109089 libXi: libXi: Arbitrary code execution via
DEVICE_RESOLUTION heap-based buffer overflow
Resolves: RHEL-293452

[1.7.10-8.2]
- CVE-2026-109090 libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
Resolves: RHEL-293398

Related CVEs

CVE-2026-109089

CVE-2026-109090

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	libXi-1.7.10-8.el9_8.3.src.rpm	cd79e1227cb5bbd99a1a5a60e6a687e358c7fa90c5fcd4911df23348da0e57d6	-	ol9_aarch64_appstream
	libXi-1.7.10-8.el9_8.3.aarch64.rpm	99f69cf6139b89bb8b1f80efc634d53600624f0014bb969c2ed6d8098f5bd177	-	ol9_aarch64_appstream
	libXi-devel-1.7.10-8.el9_8.3.aarch64.rpm	dc2fb8263b9222f26e67f013073e138d4c88de3d42a09a6905da096dc3c977f1	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	libXi-1.7.10-8.el9_8.3.src.rpm	cd79e1227cb5bbd99a1a5a60e6a687e358c7fa90c5fcd4911df23348da0e57d6	-	ol9_x86_64_appstream
	libXi-1.7.10-8.el9_8.3.i686.rpm	f0731a8893f28f707ab8cf1f589b4a86f5b6cd35e47eaada76cfca232af4dfe7	-	ol9_x86_64_appstream
	libXi-1.7.10-8.el9_8.3.x86_64.rpm	32fb841f7fdc0493c25a395b884bee1e2ff600772c10288c1d3e194ec716d078	-	ol9_x86_64_appstream
	libXi-devel-1.7.10-8.el9_8.3.i686.rpm	310773bd27e1191bd8b859613fb6896a8ba75cdfc4a206e73c50efdd01c40263	-	ol9_x86_64_appstream
	libXi-devel-1.7.10-8.el9_8.3.x86_64.rpm	aa96e943231f6a705279fe13baa3656ec0b5fb8bfa8aaff4fa7f3ab22a18b9d1	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team