ALSA-2026:91004: Moderate: libXi security update
Published Oct 27, 2026
·Updated
X.Org X11 libXi runtime library
Security Fix(es):
libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
2 affected componentsFixes available
almalinux/libxi<1.8.1-7.el10_2.1
1.8.1-7.el10_2.1
almalinux/libxi-devel<1.8.1-7.el10_2.1
1.8.1-7.el10_2.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/libXito a version that resolves this vulnerability.Fixed in 1.8.1-7.el10_2.1 - Upgrade
Upgrade
almalinux/libXi-develto a version that resolves this vulnerability.Fixed in 1.8.1-7.el10_2.1
Event History
Oct 27, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What type of impact does this issue have?
The issue is a denial of service caused by an out-of-bounds read in the XI2 class parser.
2
Which AlmaLinux packages are identified as affected by this update?
The update identifies the almalinux/libxi and almalinux/libxi-devel packages.