Most recent entries from all

fkie_cve-2026-109088

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.

GHSA-4rpx-8967-p725

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.

msrc_CVE-2026-109088 — libXtst RECORD EnableContext Reply Endless Loop

msrc_CVE-2026-109088

OESA-2026-4572 — libXtst security update

Affected: openEuler:22.03-LTS-SP4: libXtst

X.Org X11 libXtst runtime library Security Fix(es):

X.Org reports: Multiple issues have been found in the X client library implementations published by X.Org for which we are releasing security fixes for.(CVE-2026-109088)

openSUSE-SU-2026:12155-1 — libXtst-devel-1.2.5-3.1 on GA media

libXtst-devel-1.2.5-3.1 on GA media

RHSA-2026:93594 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

libXtst: libXtst: Denial of Service via malformed RECORD EnableContext replies

UBUNTU-CVE-2026-109088

Affected: Ubuntu:Pro:16.04:LTS: libxtst, Ubuntu:Pro:18.04:LTS: libxtst, Ubuntu:Pro:20.04:LTS: libxtst, Ubuntu:22.04:LTS: libxtst, Ubuntu:24.04:LTS: libxtst, Ubuntu:26.10: libxtst, Ubuntu:26.04:LTS: libxtst

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.