RHSA-2026:93448: Important: libXtst security update
X.Org X11 libXtst runtime librarySecurity Fix(es): libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Event History
Frequently Asked Questions
What is the practical impact of this issue?
The issue is a denial of service caused by an out-of-bounds read in the libXtst RECORD reply parser. The provided advisory does not state whether code execution or information disclosure is possible.
What component should be prioritized for remediation?
Prioritize systems using the X.Org X11 libXtst runtime library, specifically where the libXtst RECORD reply parser is in use. The advisory identifies the affected component but does not provide affected or fixed package versions.
What can be done if the update cannot be applied immediately?
The provided advisory does not document a workaround or mitigation. Limit exposure to untrusted X11 interactions where feasible until the vendor update can be applied.