RHSA-2026:93439: Important: libXi security update

Published Nov 2, 2026

Updated

X.Org X11 libXi runtime librarySecurity Fix(es): libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply (CVE-2026-109090) libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow (CVE-2026-109089) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

0 affected components

Event History

Nov 2, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which components are implicated by this update?

The security fixes apply to the X.Org X11 libXi runtime library. They address CVE-2026-109090 and CVE-2026-109089.

What types of exploitation are addressed?

CVE-2026-109090 is described as arbitrary code execution through an oversized DEVICE_ENABLE reply. CVE-2026-109089 is described as arbitrary code execution through a heap-based buffer overflow involving DEVICE_RESOLUTION.