Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 2

Vulnerabilities 6

• High 7.4
  CVE-2026-93543

  Out-of-bounds read in libXi's XI2 class parser

  An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Sep 24, 2026
• Medium 6.5
  CVE-2026-93541

  Out-of-bounds read in libXi's XQueryDeviceState()

  An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Sep 24, 2026
• Medium 6.5
  CVE-2026-93542

  Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()

  An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Sep 24, 2026
• Medium 6.5
  CVE-2026-93544

  Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing

  An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Sep 24, 2026
• Medium 6.5
  CVE-2026-93545

  Out-of-bounds read in libXi's XListInputDevices()

  An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Sep 24, 2026
• Medium 6.5
  CVE-2026-94281

  Out-of-bounds read in libXi's XListInputDevices() class parsing

  An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Sep 24, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-93541
• report
  https://access.redhat.com/security/cve/CVE-2026-93542
• report
  https://access.redhat.com/security/cve/CVE-2026-93543
• report
  https://access.redhat.com/security/cve/CVE-2026-93544
• report
  https://access.redhat.com/security/cve/CVE-2026-93545
• report
  https://access.redhat.com/security/cve/CVE-2026-94281
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71839.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2540596
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-93541
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-93541
• article
  https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=7b6fffd13fd3914e0b39f3a4f131913da7f066e7
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2540477
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-93542
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-93542
• article
  https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=f499944ad595b9bd7e7571c810842244caf150aa
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2540529
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-93543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-93543
• article
  https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=e2089ab748828273f916bbffd4e65b506aa50fdc
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2540375
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-93544
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-93544
• article
  https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=a88a341135b79f6ed450f481e4a5d6ba502382af
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2540434
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-93545
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-93545
• article
  https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=234ce17d95c42d75f7f7fdb2bf7a24875451bc0a
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2540402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-94281
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-94281
• article
  https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=605f419d013153bf9e026cd100752ffbe930f3c1