Red Hat Security Advisory

RHSA-2026:51060

libXfont2 security update

Released 2026-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) libXfont2-2.0.3-2.el8_4.1
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libXfont2-2.0.3-2.el8_4.1

Fixes 3 records

TI-2026-40398 CVE-2026-56003 · GHSA-3v92-8994-jg8p

libXfont2 computeProps Property Buffer Heap Buffer Overflow

MEDIUM 40

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clie…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.004 Published 2026-07-08 Fixed in 2.0.8 CWE-122

TI-2026-40397 CVE-2026-56002 · GHSA-r49w-hq6h-2w8q

libXfont2 PCF Font Parsing Heap Buffer Overflow

MEDIUM 40

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00428 Published 2026-07-08 Fixed in 2.0.8 CWE-122

TI-2026-40396 CVE-2026-56001 · GHSA-j726-7g32-78m6

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

MEDIUM 40

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00392 Published 2026-07-08 Fixed in 2.0.8 CWE-122