ALSA-2026:91056: Moderate: libXi security update

Q: What systems are exposed to this issue?

Systems with the AlmaLinux libXi runtime library installed are affected. The libXi-devel package is also listed in the update.

Q: What is the impact of successful exploitation?

The issue is an out-of-bounds read in the XI2 class parser that can lead to denial of service.

Published Oct 27, 2026

Updated

X.Org X11 libXi runtime library

Security Fix(es):

libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

2 affected componentsFixes available

almalinux/libxi<1.7.10-8.el9_8.1

1.7.10-8.el9_8.1

almalinux/libxi-devel<1.7.10-8.el9_8.1

1.7.10-8.el9_8.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/libXi to a version that resolves this vulnerability.
Fixed in 1.7.10-8.el9_8.1
Upgrade
Upgrade almalinux/libXi-devel to a version that resolves this vulnerability.
Fixed in 1.7.10-8.el9_8.1

Event History

Oct 27, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-93543

Frequently Asked Questions

What systems are exposed to this issue?