OESA-2026-4573: libXtst security update

Q: What level of access does an attacker need to exploit this issue?

The vulnerability is rated as network-reachable with low attack complexity and requires no privileges. It does require user interaction.

Q: What is the expected impact if exploitation succeeds?

The reported impact is availability only, with high availability impact. No confidentiality or integrity impact is indicated by the supplied severity vector.

Published Oct 29, 2026

Updated

X.Org X11 libXtst runtime library Security Fix(es):

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109088)

Affected Software

1 affected componentFixes available

openeuler/libxtst<1.2.4-4.oe2403sp1

1.2.4-4.oe2403sp1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openeuler/libXtst to a version that resolves this vulnerability.
Fixed in 1.2.4-4.oe2403sp1

Event History

Oct 29, 2026

Advisory Published

via OSV·09:03 AM

Data Sourced

via OSV·09:03 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-109088

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is rated as network-reachable with low attack complexity and requires no privileges. It does require user interaction.

What is the expected impact if exploitation succeeds?

The reported impact is availability only, with high availability impact. No confidentiality or integrity impact is indicated by the supplied severity vector.

OESA-2026-4573: libXtst security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact if exploitation succeeds?