OESA-2026-4609: libXi security update

Q: What access and conditions does exploitation require?

The CVSS vector indicates network access is possible and no privileges are required. Exploitation has high attack complexity and requires user interaction.

Q: What is the potential impact if exploitation succeeds?

The advisory rates confidentiality, integrity, and availability impact as high. The vulnerability has a CVSS score of 7.5 and severity of high.

Published Oct 29, 2026

Updated

libXi is the client-side library for the X Input Extension. Security Fix(es):

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)

Affected Software

1 affected componentFixes available

openeuler/libxi<1.8.1-6.oe2403sp3

1.8.1-6.oe2403sp3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openeuler/libXi to a version that resolves this vulnerability.
Fixed in 1.8.1-6.oe2403sp3

Event History

Oct 29, 2026

Advisory Published

via OSV·09:03 AM

Data Sourced

via OSV·09:03 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What access and conditions does exploitation require?

The CVSS vector indicates network access is possible and no privileges are required. Exploitation has high attack complexity and requires user interaction.

What is the potential impact if exploitation succeeds?