[CLSA-2026:1793987590] libXi: Fix of CVE-2026-109090
Type:
security
Severity:
Important
Release date:
2026-11-07 00:02:19 UTC
Description:
- Fix CVE-2026-109090: heap overflow in XGetDeviceControl() via an oversized DEVICE_ENABLE reply
CVEs fixed:
Updated packages:
  • libXi-1.7.9-1.el7.tuxcare.els2.aarch64.rpm
    sha:4036abd0c0a6e33db3110a4f03ed669a9b8556de2f19c11ac49d3d95dc680fe6
  • libXi-1.7.9-1.el7.tuxcare.els2.i686.rpm
    sha:03fed23a30c8b5f5e9547d2ff545fa6eea7eb1bf9b537d89806401ec9d8ded5e
  • libXi-1.7.9-1.el7.tuxcare.els2.x86_64.rpm
    sha:4f8d497055aa75bf682283a39e2818eda7d3224568d552f2ca781d9a1c169d91
  • libXi-devel-1.7.9-1.el7.tuxcare.els2.aarch64.rpm
    sha:13c50c64c3e7c9a3b5df5b4c4b462a963de2ca395a83ee74806af0b526a694b0
  • libXi-devel-1.7.9-1.el7.tuxcare.els2.i686.rpm
    sha:c756830068132c2976b5b27def1bbeab555012a3ebb5e4dc78935ed6897aa5b9
  • libXi-devel-1.7.9-1.el7.tuxcare.els2.x86_64.rpm
    sha:732a792c426b38e2484db9e0158deec88c67022ad78a9ddd1dffafc597c322fe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.