OESA-2026-4611: libXi security update

Q: What conditions are required for exploitation?

The reported vector is network-based, but exploitation has high attack complexity and requires user interaction. No privileges are required by the attacker.

Q: What is the potential impact if exploitation succeeds?

The advisory rates the issues high severity with potential high impact to confidentiality, integrity, and availability. The scope is unchanged.

Q: Which software should be reviewed for exposure?

Review systems using the openEuler libXi package. libXi is the client-side library for the X Input Extension.

Published Oct 29, 2026

Updated

libXi is the client-side library for the X Input Extension. Security Fix(es):

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109089)

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109090)

Affected Software

1 affected componentFixes available

openeuler/libxi<1.8.1-6.oe2403sp1

1.8.1-6.oe2403sp1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openeuler/libXi to a version that resolves this vulnerability.
Fixed in 1.8.1-6.oe2403sp1

Event History

Oct 29, 2026

Advisory Published

via OSV·09:03 AM

Data Sourced

via OSV·09:03 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What conditions are required for exploitation?

The reported vector is network-based, but exploitation has high attack complexity and requires user interaction. No privileges are required by the attacker.

What is the potential impact if exploitation succeeds?

The advisory rates the issues high severity with potential high impact to confidentiality, integrity, and availability. The scope is unchanged.

Which software should be reviewed for exposure?

Review systems using the openEuler libXi package. libXi is the client-side library for the X Input Extension.

OESA-2026-4611: libXi security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What conditions are required for exploitation?

What is the potential impact if exploitation succeeds?

Which software should be reviewed for exposure?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

What is the potential impact if exploitation succeeds?

Which software should be reviewed for exposure?