[CLSA-2026:1794232944] Fix CVE(s): CVE-2026-109090
Type:
security
Severity:
Important
Release date:
2026-11-09 14:02:33 UTC
Description:
* SECURITY UPDATE: heap overflow in XGetDeviceControl() via an oversized DEVICE_ENABLE reply - debian/patches/CVE-2026-109090.patch: size DEVICE_ENABLE replies for XDeviceEnableState - CVE-2026-109090
CVEs fixed:
Updated packages:
  • libxi-dev_1.7.10-1+tuxcare.els2_amd64.deb
    sha:a064317002055fec4a3ae2dd92eeb921784d35c6
  • libxi6_1.7.10-1+tuxcare.els2_amd64.deb
    sha:91504499158896328e8b4e19a91462e1cd41e101
  • libxi-dev_1.7.10-1+tuxcare.els2_arm64.deb
    sha:193e1fc0a1d923fee681e3f9e3e7369975b33d41
  • libxi6_1.7.10-1+tuxcare.els2_arm64.deb
    sha:c4c4bea222e6509707fe7da47f0353b9797dbe21
  • libxi-dev_1.7.10-1+tuxcare.els2_armel.deb
    sha:6ee5ff9b2a21de99b13d67f60172be198042237b
  • libxi6_1.7.10-1+tuxcare.els2_armel.deb
    sha:182aa6fc371fa77ebfacbc0fd0659493a5f91573
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.