Red Hat Product Errata RHSA-2026:91223 - Security Advisory
Issued:
2026-10-27
Updated:
2026-10-29

RHSA-2026:91223 - Security Advisory

Synopsis

Important: libXtst security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXtst is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

X.Org X11 libXtst runtime library

Security Fix(es):

  • libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser (CVE-2026-94286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2542377 - CVE-2026-94286 libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser

Red Hat Enterprise Linux for x86_64 9

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
x86_64
libXtst-1.2.3-16.el9_8.1.i686.rpm SHA-256: 5320e1e01607c257878cfec83376f46da28f3dc43f74f875cc8f3d9da49286c2
libXtst-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 5f948be4d6cac0ee830d54051e787916a345786fe5d54601cbda8d903e1a814b
libXtst-debuginfo-1.2.3-16.el9_8.1.i686.rpm SHA-256: 9888e5c8f3dccb4ae134f0ca0e025f17ef1e81efe86d6588cf612a981fcc7f98
libXtst-debuginfo-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 7aed6f4d6dd2e2c0f774bdbfc9fac8724eb185a66cec1ae626fa62b809955af1
libXtst-debugsource-1.2.3-16.el9_8.1.i686.rpm SHA-256: 2176f4de1d8cdb38c503a4510181fe37ba262460cf5ef653bc673f46d8a017dd
libXtst-debugsource-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 891583ed0044a157696d69419c60e0c4d6447053196401446e9d9f7e66f6910f
libXtst-devel-1.2.3-16.el9_8.1.i686.rpm SHA-256: ff931da2a6ae560cf196c1b8e82b1435b00c29c9f0f49673580c6607454c465f
libXtst-devel-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 15cb7973c503838bc3c12321beee0560e01386c06400d1c0c777b6d63a4fa636

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
x86_64
libXtst-1.2.3-16.el9_8.1.i686.rpm SHA-256: 5320e1e01607c257878cfec83376f46da28f3dc43f74f875cc8f3d9da49286c2
libXtst-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 5f948be4d6cac0ee830d54051e787916a345786fe5d54601cbda8d903e1a814b
libXtst-debuginfo-1.2.3-16.el9_8.1.i686.rpm SHA-256: 9888e5c8f3dccb4ae134f0ca0e025f17ef1e81efe86d6588cf612a981fcc7f98
libXtst-debuginfo-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 7aed6f4d6dd2e2c0f774bdbfc9fac8724eb185a66cec1ae626fa62b809955af1
libXtst-debugsource-1.2.3-16.el9_8.1.i686.rpm SHA-256: 2176f4de1d8cdb38c503a4510181fe37ba262460cf5ef653bc673f46d8a017dd
libXtst-debugsource-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 891583ed0044a157696d69419c60e0c4d6447053196401446e9d9f7e66f6910f
libXtst-devel-1.2.3-16.el9_8.1.i686.rpm SHA-256: ff931da2a6ae560cf196c1b8e82b1435b00c29c9f0f49673580c6607454c465f
libXtst-devel-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 15cb7973c503838bc3c12321beee0560e01386c06400d1c0c777b6d63a4fa636

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
s390x
libXtst-1.2.3-16.el9_8.1.s390x.rpm SHA-256: db8a69074a9c4bd6b4fb1a1a1d14eb600da3bc79d88fa17bf9430490bca71e51
libXtst-debuginfo-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e3bf02316de63c82c26cf7ffd27f991d5fff2638cf51de0718b47cd74d265b29
libXtst-debugsource-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e45639d10993e1dbb9ebcdc01c5a0c6f185a2ff63d6754c92007ef56c361ffdc
libXtst-devel-1.2.3-16.el9_8.1.s390x.rpm SHA-256: b83836d8d0172b74f8a105afea95ee00031b3ba83fbd6a66096d784f030f9440

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
s390x
libXtst-1.2.3-16.el9_8.1.s390x.rpm SHA-256: db8a69074a9c4bd6b4fb1a1a1d14eb600da3bc79d88fa17bf9430490bca71e51
libXtst-debuginfo-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e3bf02316de63c82c26cf7ffd27f991d5fff2638cf51de0718b47cd74d265b29
libXtst-debugsource-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e45639d10993e1dbb9ebcdc01c5a0c6f185a2ff63d6754c92007ef56c361ffdc
libXtst-devel-1.2.3-16.el9_8.1.s390x.rpm SHA-256: b83836d8d0172b74f8a105afea95ee00031b3ba83fbd6a66096d784f030f9440

Red Hat Enterprise Linux for Power, little endian 9

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
ppc64le
libXtst-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: afdff968b55532c7db3953a9354d7624c1cd67ffc5aa4f55b35c0bb99437ced4
libXtst-debuginfo-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: 70b3f694a7ca92220b6126f7317788d56b3b1704e4e8d62b6506306aeb0c17af
libXtst-debugsource-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: febd28ea14cbb03b453feb12bcf4af93cb60baf47be47b3e01a46a532eae0dd1
libXtst-devel-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: fb9317a0aa7a245a9c474e343eaf4b714ff214e1d2865f787991bc2ea5e29965

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
ppc64le
libXtst-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: afdff968b55532c7db3953a9354d7624c1cd67ffc5aa4f55b35c0bb99437ced4
libXtst-debuginfo-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: 70b3f694a7ca92220b6126f7317788d56b3b1704e4e8d62b6506306aeb0c17af
libXtst-debugsource-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: febd28ea14cbb03b453feb12bcf4af93cb60baf47be47b3e01a46a532eae0dd1
libXtst-devel-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: fb9317a0aa7a245a9c474e343eaf4b714ff214e1d2865f787991bc2ea5e29965

Red Hat Enterprise Linux for ARM 64 9

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
aarch64
libXtst-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f80757a40ae7f0fc18ce2b2ac613068eaedcfc248f1c15309f705ce12f1a4118
libXtst-debuginfo-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 5bad5e6875baa74a162054b561df75d2fd8270dde4d357ce04e615ca3f96067a
libXtst-debugsource-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f8fba377e50af05d37bf215e9a0c880bd214b5680b0f177aa8ee6043236500b9
libXtst-devel-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 234a4d4d33bce01f9def68f050522f1d84ac80bf531c2b8b2938c00260dab4f8

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
aarch64
libXtst-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f80757a40ae7f0fc18ce2b2ac613068eaedcfc248f1c15309f705ce12f1a4118
libXtst-debuginfo-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 5bad5e6875baa74a162054b561df75d2fd8270dde4d357ce04e615ca3f96067a
libXtst-debugsource-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f8fba377e50af05d37bf215e9a0c880bd214b5680b0f177aa8ee6043236500b9
libXtst-devel-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 234a4d4d33bce01f9def68f050522f1d84ac80bf531c2b8b2938c00260dab4f8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
ppc64le
libXtst-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: afdff968b55532c7db3953a9354d7624c1cd67ffc5aa4f55b35c0bb99437ced4
libXtst-debuginfo-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: 70b3f694a7ca92220b6126f7317788d56b3b1704e4e8d62b6506306aeb0c17af
libXtst-debugsource-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: febd28ea14cbb03b453feb12bcf4af93cb60baf47be47b3e01a46a532eae0dd1
libXtst-devel-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: fb9317a0aa7a245a9c474e343eaf4b714ff214e1d2865f787991bc2ea5e29965

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
x86_64
libXtst-1.2.3-16.el9_8.1.i686.rpm SHA-256: 5320e1e01607c257878cfec83376f46da28f3dc43f74f875cc8f3d9da49286c2
libXtst-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 5f948be4d6cac0ee830d54051e787916a345786fe5d54601cbda8d903e1a814b
libXtst-debuginfo-1.2.3-16.el9_8.1.i686.rpm SHA-256: 9888e5c8f3dccb4ae134f0ca0e025f17ef1e81efe86d6588cf612a981fcc7f98
libXtst-debuginfo-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 7aed6f4d6dd2e2c0f774bdbfc9fac8724eb185a66cec1ae626fa62b809955af1
libXtst-debugsource-1.2.3-16.el9_8.1.i686.rpm SHA-256: 2176f4de1d8cdb38c503a4510181fe37ba262460cf5ef653bc673f46d8a017dd
libXtst-debugsource-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 891583ed0044a157696d69419c60e0c4d6447053196401446e9d9f7e66f6910f
libXtst-devel-1.2.3-16.el9_8.1.i686.rpm SHA-256: ff931da2a6ae560cf196c1b8e82b1435b00c29c9f0f49673580c6607454c465f
libXtst-devel-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 15cb7973c503838bc3c12321beee0560e01386c06400d1c0c777b6d63a4fa636

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
aarch64
libXtst-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f80757a40ae7f0fc18ce2b2ac613068eaedcfc248f1c15309f705ce12f1a4118
libXtst-debuginfo-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 5bad5e6875baa74a162054b561df75d2fd8270dde4d357ce04e615ca3f96067a
libXtst-debugsource-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f8fba377e50af05d37bf215e9a0c880bd214b5680b0f177aa8ee6043236500b9
libXtst-devel-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 234a4d4d33bce01f9def68f050522f1d84ac80bf531c2b8b2938c00260dab4f8

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
s390x
libXtst-1.2.3-16.el9_8.1.s390x.rpm SHA-256: db8a69074a9c4bd6b4fb1a1a1d14eb600da3bc79d88fa17bf9430490bca71e51
libXtst-debuginfo-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e3bf02316de63c82c26cf7ffd27f991d5fff2638cf51de0718b47cd74d265b29
libXtst-debugsource-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e45639d10993e1dbb9ebcdc01c5a0c6f185a2ff63d6754c92007ef56c361ffdc
libXtst-devel-1.2.3-16.el9_8.1.s390x.rpm SHA-256: b83836d8d0172b74f8a105afea95ee00031b3ba83fbd6a66096d784f030f9440

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
x86_64
libXtst-1.2.3-16.el9_8.1.i686.rpm SHA-256: 5320e1e01607c257878cfec83376f46da28f3dc43f74f875cc8f3d9da49286c2
libXtst-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 5f948be4d6cac0ee830d54051e787916a345786fe5d54601cbda8d903e1a814b
libXtst-debuginfo-1.2.3-16.el9_8.1.i686.rpm SHA-256: 9888e5c8f3dccb4ae134f0ca0e025f17ef1e81efe86d6588cf612a981fcc7f98
libXtst-debuginfo-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 7aed6f4d6dd2e2c0f774bdbfc9fac8724eb185a66cec1ae626fa62b809955af1
libXtst-debugsource-1.2.3-16.el9_8.1.i686.rpm SHA-256: 2176f4de1d8cdb38c503a4510181fe37ba262460cf5ef653bc673f46d8a017dd
libXtst-debugsource-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 891583ed0044a157696d69419c60e0c4d6447053196401446e9d9f7e66f6910f
libXtst-devel-1.2.3-16.el9_8.1.i686.rpm SHA-256: ff931da2a6ae560cf196c1b8e82b1435b00c29c9f0f49673580c6607454c465f
libXtst-devel-1.2.3-16.el9_8.1.x86_64.rpm SHA-256: 15cb7973c503838bc3c12321beee0560e01386c06400d1c0c777b6d63a4fa636

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
aarch64
libXtst-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f80757a40ae7f0fc18ce2b2ac613068eaedcfc248f1c15309f705ce12f1a4118
libXtst-debuginfo-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 5bad5e6875baa74a162054b561df75d2fd8270dde4d357ce04e615ca3f96067a
libXtst-debugsource-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: f8fba377e50af05d37bf215e9a0c880bd214b5680b0f177aa8ee6043236500b9
libXtst-devel-1.2.3-16.el9_8.1.aarch64.rpm SHA-256: 234a4d4d33bce01f9def68f050522f1d84ac80bf531c2b8b2938c00260dab4f8

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
ppc64le
libXtst-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: afdff968b55532c7db3953a9354d7624c1cd67ffc5aa4f55b35c0bb99437ced4
libXtst-debuginfo-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: 70b3f694a7ca92220b6126f7317788d56b3b1704e4e8d62b6506306aeb0c17af
libXtst-debugsource-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: febd28ea14cbb03b453feb12bcf4af93cb60baf47be47b3e01a46a532eae0dd1
libXtst-devel-1.2.3-16.el9_8.1.ppc64le.rpm SHA-256: fb9317a0aa7a245a9c474e343eaf4b714ff214e1d2865f787991bc2ea5e29965

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
libXtst-1.2.3-16.el9_8.1.src.rpm SHA-256: 365bd26b4d18d2c33eef281df40204c1517ea5dab9c1a4ef30554cb9f1dde792
s390x
libXtst-1.2.3-16.el9_8.1.s390x.rpm SHA-256: db8a69074a9c4bd6b4fb1a1a1d14eb600da3bc79d88fa17bf9430490bca71e51
libXtst-debuginfo-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e3bf02316de63c82c26cf7ffd27f991d5fff2638cf51de0718b47cd74d265b29
libXtst-debugsource-1.2.3-16.el9_8.1.s390x.rpm SHA-256: e45639d10993e1dbb9ebcdc01c5a0c6f185a2ff63d6754c92007ef56c361ffdc
libXtst-devel-1.2.3-16.el9_8.1.s390x.rpm SHA-256: b83836d8d0172b74f8a105afea95ee00031b3ba83fbd6a66096d784f030f9440

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.