ALSA-2026:93438: Important: libXi security update
Published Nov 2, 2026
·Updated
X.Org X11 libXi runtime library
Security Fix(es):
libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply (CVE-2026-109090) libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow (CVE-2026-109089)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
2 affected componentsFixes available
almalinux/libxi<1.7.10-4.el8_10
1.7.10-4.el8_10
almalinux/libxi-devel<1.7.10-4.el8_10
1.7.10-4.el8_10
Event History
Nov 2, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software