OESA-2026-4610: libXi security update
libXi is the client-side library for the X Input Extension. Security Fix(es):
X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)
X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/libXito a version that resolves this vulnerability.Fixed in 1.8.1-6.oe2403sp4
Event History
Frequently Asked Questions
Who is exposed to these issues?
Systems using the openEuler libXi package are in scope. The affected component is the client-side library for the X Input Extension.
What access would an attacker need to exploit these issues?
The supplied vector indicates network access is possible without privileges, but exploitation has high attack complexity and requires user interaction. The vector also indicates potential confidentiality, integrity, and availability impact.
How can I determine whether my system needs remediation?
Check whether the system uses the openEuler libXi package and whether it has received the security update published on 2026-10-29. The advisory identifies CVE-2026-109089 and CVE-2026-109090 as the addressed issues.