Red Hat Security Advisory

RHSA-2026:62231

libXfont2 security update

Released 2026-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) libXfont2-2.0.3-3.el7_9, libXfont2-2.0.3-3.el7_9.ppc
Red Hat Enterprise Linux Server Optional (v. 7 ELS) libXfont2-devel-2.0.3-3.el7_9, libXfont2-devel-2.0.3-3.el7_9.ppc

Fixes 2 records

TI-2026-32816 CVE-2026-44950 · GHSA-72vv-3gwg-8289

fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2

MEDIUM 42

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00262 Published 2026-09-10 Fixed in 2.0.3-150000.3.6.1, 2.0.7-160000.5.1 +5 CWE-122

TI-2026-42556 CVE-2026-59679 · GHSA-g44m-wpf7-gr7x

fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2

MEDIUM 41

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from n…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00256 Published 2026-09-10 Fixed in 2.0.3-150000.3.6.1, 2.0.7-160000.5.1 +5 CWE-787