Red Hat Enterprise Linux (libXi, ghostscript): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.5
  CVE-2026-109089

  libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow

  A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Oct 27, 2026
• High 7.5
  CVE-2026-109090

  libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

  A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

  X.Org libXi libxi libxi Debian Ubuntu Azure Linux Alpine
  Oct 27, 2026
• High 7.3
  CVE-2026-112177

  Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8

  A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected.…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux
  Oct 20, 2026

Revision history

1. 2026-11-12 #5

   Neue Updates von Red Hat aufgenommen

2. 2026-11-11 #4

   Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

3. 2026-11-10 #3

   Neue Updates von SUSE aufgenommen

4. 2026-11-09 #2

   Neue Updates von Amazon aufgenommen

5. 2026-11-02 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:93439 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93439
• Red Hat Security Advisory RHSA-2026:93978 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93978
• Oracle Linux Security Advisory ELSA-2026-93978 vom 2026-11-03
  https://linux.oracle.com/errata/ELSA-2026-93978.html
• Oracle Linux Security Advisory ELSA-2026-93438 vom 2026-11-02
  https://linux.oracle.com/errata/ELSA-2026-93438.html
• Oracle Linux Security Advisory ELSA-2026-93441 vom 2026-11-02
  https://linux.oracle.com/errata/ELSA-2026-93441.html
• Oracle Linux Security Advisory ELSA-2026-93439 vom 2026-11-02
  https://linux.oracle.com/errata/ELSA-2026-93439.html
• Rocky Linux Security Advisory RLSA-2026:93441 vom 2026-11-03
  https://errata.build.resf.org/RLSA-2026:93441
• Rocky Linux Security Advisory RLSA-2026:93438 vom 2026-11-03
  https://errata.build.resf.org/RLSA-2026:93438
• Rocky Linux Security Advisory RLSA-2026:93978 vom 2026-11-03
  https://errata.build.resf.org/RLSA-2026:93978
• Rocky Linux Security Advisory RLSA-2026:93439 vom 2026-11-03
  https://errata.build.resf.org/RLSA-2026:93439
• Amazon Linux Security Advisory ALAS2-2026-4088 vom 2026-11-10
  https://alas.aws.amazon.com/AL2/ALAS2-2026-4088.html
• SUSE Security Update SUSE-SU-2026:5165-1 vom 2026-11-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030525.html
• SUSE Security Update SUSE-SU-2026:5166-1 vom 2026-11-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030544.html
• Red Hat Security Advisory RHSA-2026:98611 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98611
• Red Hat Security Advisory RHSA-2026:98504 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98504
• Rocky Linux Security Advisory RLSA-2026:98504 vom 2026-11-12
  https://errata.build.resf.org/RLSA-2026:98504
• Red Hat Security Advisory RHSA-2026:99767 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99767