High ELSA-2026-91294 1 CVE

Important: libXtst security update (Oracle Linux 8)

Published Oct 27, 2026 · Updated Oct 27, 2026

Ecosystem: Oracle Linux

Summary

[1.2.3-8]
- CVE-2026-94286 libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser
in RECORD reply parser

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	libXtst	0:1.2.3-8.el8_10
Oracle Linux · 8	libXtst-devel	0:1.2.3-8.el8_10

Vulnerabilities 1

High 7.1

CVE-2026-94286

Out-of-bounds read in libXtst's RECORD reply parser

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients.

X.Org libXtst libxtst libxtst Debian Ubuntu Azure Linux Alpine

Sep 28, 2026