Release date:
2026-11-04 09:04:50 UTC
Description:
* SECURITY UPDATE: heap overflow in XGetDeviceControl() via a mismatched
control type in the X server reply
- debian/patches/CVE-2026-109089.patch: require the reply control to
match the requested one (upstream f7836d0a0f)
- CVE-2026-109089
Updated packages:
-
libxi-dev_1.7.10-1+tuxcare.els1_amd64.deb
sha:340e365166f0915eaaaadc5ec06b89b03ce2937b
-
libxi6_1.7.10-1+tuxcare.els1_amd64.deb
sha:cbac05da76ad764de4b077e0ab19d1bb056d478d
-
libxi-dev_1.7.10-1+tuxcare.els1_arm64.deb
sha:5d92353c144415fb06d328a3d610e8c3999f77b8
-
libxi6_1.7.10-1+tuxcare.els1_arm64.deb
sha:480cd340be4f0aa698e1194b0e22caf19cdf2110
-
libxi-dev_1.7.10-1+tuxcare.els1_armel.deb
sha:2fe5f98e3b4359fdf133d85ec7d2fb6b6a574abc
-
libxi6_1.7.10-1+tuxcare.els1_armel.deb
sha:43ef84a20a1ff7ad9577a1c9d4383222ddf21c05
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
