Read the docs
TI-2026-32816 Aliases CVE-2026-44950GHSA-72vv-3gwg-8289

fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2

Priority MEDIUM 42CWE-122Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.

Summary

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the allocation. A malicious font server can send overlapping source offsets -- for example 1000 glyphs each referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap buffer overflow with attacker-controlled content.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00262 18th percentileScored 2026-11-07
Fix Fixed Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 (SUSE): 2.0.3-150000.3.6.1Container suse/kiosk/xorg:21.1-83.7 (SUSE): 2.0.3-150000.3.6.1+77 more productsRed Hat: 11 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSEContainer suse/kiosk/tigervnc-x11vnc:1.14-63.8? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEContainer suse/kiosk/xorg:21.1-83.7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Azure-3P? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Azure-3P? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-GCE-3P? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAPCAL-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAPCAL-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAPCAL-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES-SAP-Azure? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-Azure-3P? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-BYOS-Azure? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-BYOS-EC2? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-BYOS-GCE? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-GCE? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-GCE-3P? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAPCAL-GCE? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES12-SP5-Azure-SAP-BYOS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-Azure-SAP-On-Demand? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-EC2-SAP-BYOS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-EC2-SAP-On-Demand? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-GCE-SAP-BYOS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-GCE-SAP-On-Demand? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSESUSE Liberty Linux 10? to before 2.0.6-5.el10_2.32.0.6-5.el10_2.3Patch availableCNA
SUSESUSE Liberty Linux 10? to before 2.0.6-5.el10_2.32.0.6-5.el10_2.3Patch availableCNA
SUSESUSE Liberty Linux 8? to before 2.0.3-2.el8_10.32.0.3-2.el8_10.3Patch availableCNA
SUSESUSE Liberty Linux 8? to before 2.0.3-2.el8_10.32.0.3-2.el8_10.3Patch availableCNA
SUSESUSE Liberty Linux 9? to before 2.0.3-12.el9_8.32.0.3-12.el9_8.3Patch availableCNA
SUSESUSE Liberty Linux 9? to before 2.0.3-12.el9_8.32.0.3-12.el9_8.3Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 12 SP5-LTSS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP applications 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP applications 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server LTSS Extended Security 12 SP5? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEopenSUSE Leap 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEopenSUSE Leap 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
libXfontlibXfont? – 2.0.8—No fix listedCNA
  • Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Container suse/kiosk/xorg:21.1-83.7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Azure-3P VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Azure-3P VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-GCE-3P VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAPCAL-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAPCAL-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAPCAL-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES-SAP-Azure VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-Azure-3P VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-BYOS-Azure VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-BYOS-EC2 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-BYOS-GCE VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-GCE VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-GCE-3P VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAPCAL-GCE VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES12-SP5-Azure-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-Azure-SAP-On-Demand VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-EC2-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-EC2-SAP-On-Demand VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-GCE-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-GCE-SAP-On-Demand VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • SUSE Liberty Linux 10 VendorSUSE Affected ? to before 2.0.6-5.el10_2.3 Fixed in 2.0.6-5.el10_2.3 Patch available CNA
  • SUSE Liberty Linux 10 VendorSUSE Affected ? to before 2.0.6-5.el10_2.3 Fixed in 2.0.6-5.el10_2.3 Patch available CNA
  • SUSE Liberty Linux 8 VendorSUSE Affected ? to before 2.0.3-2.el8_10.3 Fixed in 2.0.3-2.el8_10.3 Patch available CNA
  • SUSE Liberty Linux 8 VendorSUSE Affected ? to before 2.0.3-2.el8_10.3 Fixed in 2.0.3-2.el8_10.3 Patch available CNA
  • SUSE Liberty Linux 9 VendorSUSE Affected ? to before 2.0.3-12.el9_8.3 Fixed in 2.0.3-12.el9_8.3 Patch available CNA
  • SUSE Liberty Linux 9 VendorSUSE Affected ? to before 2.0.3-12.el9_8.3 Fixed in 2.0.3-12.el9_8.3 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 12 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP applications 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP applications 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • openSUSE Leap 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • openSUSE Leap 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • libXfont VendorlibXfont Affected ? – 2.0.8 Fixed in — No fix listed CNA

Remediation

  • Fix · CNA Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Container suse/kiosk/xorg:21.1-83.7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Azure-3P (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Azure-3P (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-GCE-3P (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAPCAL-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAPCAL-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAPCAL-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES-SAP-Azure (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-Azure-3P (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-BYOS-Azure (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-BYOS-EC2 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-BYOS-GCE (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-GCE (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-GCE-3P (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAPCAL-GCE (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES12-SP5-Azure-SAP-BYOS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-Azure-SAP-On-Demand (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-EC2-SAP-BYOS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-EC2-SAP-On-Demand (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-GCE-SAP-BYOS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-GCE-SAP-On-Demand (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA SUSE Liberty Linux 10 (SUSE) Fixed in 2.0.6-5.el10_2.3
  • Fix · CNA SUSE Liberty Linux 10 (SUSE) Fixed in 2.0.6-5.el10_2.3
  • Fix · CNA SUSE Liberty Linux 8 (SUSE) Fixed in 2.0.3-2.el8_10.3
  • Fix · CNA SUSE Liberty Linux 8 (SUSE) Fixed in 2.0.3-2.el8_10.3
  • Fix · CNA SUSE Liberty Linux 9 (SUSE) Fixed in 2.0.3-12.el9_8.3
  • Fix · CNA SUSE Liberty Linux 9 (SUSE) Fixed in 2.0.3-12.el9_8.3
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 12 SP5-LTSS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP applications 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP applications 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA openSUSE Leap 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA openSUSE Leap 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1

Red Hat 11 advisories

  • RHSA-2026:62231 Released 2026-09-01 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) libXfont2-2.0.3-3.el7_9, libXfont2-2.0.3-3.el7_9.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) libXfont2-devel-2.0.3-3.el7_9, libXfont2-devel-2.0.3-3.el7_9.ppc
  • RHSA-2026:62123 Released 2026-09-01 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) libXfont2-2.0.6-5.el10_0.2
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libXfont2-devel-2.0.6-5.el10_0.2
  • RHSA-2026:61995 Released 2026-09-01 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) libXfont2-2.0.3-2.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libXfont2-2.0.3-2.el8_4.2
Show 8 more Red Hat advisories
  • RHSA-2026:61756 Released 2026-08-31 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) libXfont2-2.0.3-2.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) libXfont2-2.0.3-2.el8_8.2
  • RHSA-2026:61755 Released 2026-08-31 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) libXfont2-2.0.3-2.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libXfont2-2.0.3-2.el8_6.2
  • RHSA-2026:61390 Released 2026-08-31 · Red Hat rating Important
    libXfont2 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) libXfont2-devel-2.0.3-12.el9_6.3
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) libXfont2-2.0.3-12.el9_6.3
  • RHSA-2026:59312 Released 2026-08-25 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) libXfont2-2.0.3-12.el9_4.3
  • RHSA-2026:59311 Released 2026-08-25 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) libXfont2-2.0.3-12.el9_2.3
  • RHSA-2026:55447 Released 2026-08-17 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) libXfont2-2.0.3-12.el9_8.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libXfont2-devel-2.0.3-12.el9_8.3
  • RHSA-2026:55448 Released 2026-08-17 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream (v. 10) libXfont2-2.0.6-5.el10_2.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libXfont2-devel-2.0.6-5.el10_2.3
  • RHSA-2026:55446 Released 2026-08-17 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libXfont2-2.0.3-2.el8_10.3
    • Red Hat Enterprise Linux CRB (v. 8) libXfont2-devel-2.0.3-2.el8_10.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8, Container suse/kiosk/xorg:21.1-83.7 and 77 more products 2.0.3-12.el9_8.3, 2.0.3-150000.3.6.1 and 5 more versions

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-42556 fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2Priority MEDIUM 41
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:61390
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:55448
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:55446
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:55447
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:61995
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:61755
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:61756
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:59311
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:59312
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:62123
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:61390
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:61995
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:61755
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:61756
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:55446
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:55448
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:55447
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:62123
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:62231
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:62231

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-44950
  2. 2026-10-03 Alias added: GHSA-72vv-3gwg-8289

References

Other 1

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences