ELSA-2026-93441

ELSA-2026-93441 - libXi security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-02

Description

[1.8.1-7.3]
- CVE-2026-109089 libXi: libXi: Arbitrary code execution via
DEVICE_RESOLUTION heap-based buffer overflow
Resolves: RHEL-293447

[1.8.1-7.2]
- CVE-2026-109090 libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
Resolves: RHEL-293391

Related CVEs

CVE-2026-109089

CVE-2026-109090

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	libXi-1.8.1-7.el10_2.3.src.rpm	399ab6e0c9f2b2cb4e5eca041f8ec84c1e0a5f8fa8f86c0ec9460b7931ff124a	-	ol10_aarch64_appstream
	libXi-1.8.1-7.el10_2.3.aarch64.rpm	9cc2f824b469a8ba67c01df2def6b1ae11c463629c36ee0bbaf5dfabe117d147	-	ol10_aarch64_appstream
	libXi-devel-1.8.1-7.el10_2.3.aarch64.rpm	045fb031e985eec52ee6f939179937f9d5ed1abb30c535fc5587e5d0af59c66e	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	libXi-1.8.1-7.el10_2.3.src.rpm	399ab6e0c9f2b2cb4e5eca041f8ec84c1e0a5f8fa8f86c0ec9460b7931ff124a	-	ol10_x86_64_appstream
	libXi-1.8.1-7.el10_2.3.x86_64.rpm	6993ab9507b2618d4ef3e644c3bcbc25afcef6741bbe588b3439dfe23498c0ac	-	ol10_x86_64_appstream
	libXi-devel-1.8.1-7.el10_2.3.x86_64.rpm	06353a6b02a92b2860f259a97abe10a4946507ead0cfa85fb654ece5f59ad16a	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team