Updated libxtst, libxrender, libxi packages fix security vulnerabilities
Publication date: 26 Oct 2026Modification date: 26 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-109089 , CVE-2026-109090 , CVE-2026-88807 , CVE-2026-109088
Description
The updated packages fix security vulnerabilities:
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow.
(CVE-2026-109089)
libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow.
(CVE-2026-109090)
Out-of-bounds read in libXrender's XRenderQueryFormat reply parser.
(CVE-2026-88807)
libXtst RECORD EnableContext Reply Endless Loop. (CVE-2026-109088)
References
- https://bugs.mageia.org/show_bug.cgi?id=36533
- https://www.openwall.com/lists/oss-security/2026/10/16/37
- https://lists.x.org/archives/xorg-announce/2026-October/thread.html
- https://www.cve.org/CVERecord?id=CVE-2026-109089
- https://www.cve.org/CVERecord?id=CVE-2026-109090
- https://www.cve.org/CVERecord?id=CVE-2026-88807
- https://www.cve.org/CVERecord?id=CVE-2026-109088
SRPMS
10/core
- libxtst-1.2.5-2.2.mga10
- libxrender-0.9.12-2.1.mga10
- libxi-1.8.2-2.2.mga10