Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 2

Vulnerabilities 1

• Medium 6.5
  CVE-2026-109088

  libXtst RECORD EnableContext Reply Endless Loop

  A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.

  X.Org libXtst libxtst libxtst Debian Ubuntu Azure Linux Alpine
  Oct 27, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-109088
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93594.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2562156
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-109088
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-109088
• article
  https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/11