[CLSA-2026:1793984095] libXi: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-06 16:55:13 UTC
Description:
- Fix CVE-2026-109089: heap overflow in XGetDeviceControl() via a mismatched control type in the X server reply - Fix CVE-2026-109090: heap overflow in XGetDeviceControl() via an oversized DEVICE_ENABLE reply
CVEs fixed:
Updated packages:
  • libXi-1.7.9-1.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:5bb8c194cfa782d2e39e1047fbf59bbe75608adf649c9a76f8933e8c6a44991a
  • libXi-1.7.9-1.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:fe11b94ffa2c4e033525f657e3b190571f0392c823359a9a40333fd525aa9a4a
  • libXi-1.7.9-1.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:4afb71002c4bba6c28bb1c9c767da4cbf8802ef04418366e7d9c6ecafbd05b09
  • libXi-devel-1.7.9-1.amzn2.0.2.tuxcare.els1.aarch64.rpm
    sha:88b1115e5248007060c2fb6c3d7fcc34e600e165b8988f65e9738dbb07709262
  • libXi-devel-1.7.9-1.amzn2.0.2.tuxcare.els1.i686.rpm
    sha:009dd214ce24ce5f14492d560b83928ecb5add4ae186b8d675f51f90c386f6ac
  • libXi-devel-1.7.9-1.amzn2.0.2.tuxcare.els1.x86_64.rpm
    sha:2fe1bc8a5b747f080688e9dc28d8243c29a3bf71e5dc480b3df340bd9440920d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.