Read the docs
TI-2026-42556 Aliases CVE-2026-59679GHSA-g44m-wpf7-gr7x

fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2

Priority MEDIUM 41CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExtents16 reply. The two CARD32 fields are never cross-checked. A malicious or compromised font server can send a small num_extents (e.g. 1) in the extents reply, then a large num_chars (e.g. 100000) in the bitmaps reply. This causes attacker-controlled out-of-bounds heap read and writes.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00256 17th percentileScored 2026-11-07
Fix Fixed Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 (SUSE): 2.0.3-150000.3.6.1Container suse/kiosk/xorg:21.1-83.7 (SUSE): 2.0.3-150000.3.6.1+77 more productsRed Hat: 11 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSEContainer suse/kiosk/tigervnc-x11vnc:1.14-63.8? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEContainer suse/kiosk/xorg:21.1-83.7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Azure-3P? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAP-Hardened-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP6-SAPCAL-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Azure-3P? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-GCE-3P? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-BYOS-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-BYOS-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-BYOS-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAP-Hardened-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAPCAL-Azure? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAPCAL-EC2? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES15-SP7-SAPCAL-GCE? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEImage SLES-SAP-Azure? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-Azure-3P? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-BYOS-Azure? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-BYOS-EC2? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-BYOS-GCE? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-GCE? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAP-GCE-3P? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES-SAPCAL-GCE? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEImage SLES12-SP5-Azure-SAP-BYOS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-Azure-SAP-On-Demand? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-EC2-SAP-BYOS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-EC2-SAP-On-Demand? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-GCE-SAP-BYOS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSEImage SLES12-SP5-GCE-SAP-On-Demand? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSESUSE Liberty Linux 10? to before 2.0.6-5.el10_2.32.0.6-5.el10_2.3Patch availableCNA
SUSESUSE Liberty Linux 10? to before 2.0.6-5.el10_2.32.0.6-5.el10_2.3Patch availableCNA
SUSESUSE Liberty Linux 8? to before 2.0.3-2.el8_10.32.0.3-2.el8_10.3Patch availableCNA
SUSESUSE Liberty Linux 8? to before 2.0.3-2.el8_10.32.0.3-2.el8_10.3Patch availableCNA
SUSESUSE Liberty Linux 9? to before 2.0.3-12.el9_8.32.0.3-12.el9_8.3Patch availableCNA
SUSESUSE Liberty Linux 9? to before 2.0.3-12.el9_8.32.0.3-12.el9_8.3Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Desktop 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Module for Basesystem 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP7? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise High Performance Computing 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 12 SP5-LTSS? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP4-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP5-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 15 SP6-LTSS? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP applications 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP applications 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSESUSE Linux Enterprise Server LTSS Extended Security 12 SP5? to before 2.0.3-3.6.12.0.3-3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP4? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP5? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Linux Enterprise Server for SAP Applications 15 SP6? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Proxy LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Retail Branch Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSESUSE Manager Server LTS 4.3? to before 2.0.3-150000.3.6.12.0.3-150000.3.6.1Patch availableCNA
SUSEopenSUSE Leap 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEopenSUSE Leap 16.0? to before 2.0.7-160000.5.12.0.7-160000.5.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
SUSEopenSUSE Tumbleweed? to before 2.0.7-3.12.0.7-3.1Patch availableCNA
libXfont2libXfont2? – 2.0.8—No fix listedCNA
  • Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Container suse/kiosk/xorg:21.1-83.7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Azure-3P VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAP-Hardened-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP6-SAPCAL-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Azure-3P VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-GCE-3P VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-BYOS-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-BYOS-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-BYOS-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAP-Hardened-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAPCAL-Azure VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAPCAL-EC2 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES15-SP7-SAPCAL-GCE VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • Image SLES-SAP-Azure VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-Azure-3P VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-BYOS-Azure VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-BYOS-EC2 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-BYOS-GCE VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-GCE VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAP-GCE-3P VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES-SAPCAL-GCE VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • Image SLES12-SP5-Azure-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-Azure-SAP-On-Demand VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-EC2-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-EC2-SAP-On-Demand VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-GCE-SAP-BYOS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • Image SLES12-SP5-GCE-SAP-On-Demand VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • SUSE Liberty Linux 10 VendorSUSE Affected ? to before 2.0.6-5.el10_2.3 Fixed in 2.0.6-5.el10_2.3 Patch available CNA
  • SUSE Liberty Linux 10 VendorSUSE Affected ? to before 2.0.6-5.el10_2.3 Fixed in 2.0.6-5.el10_2.3 Patch available CNA
  • SUSE Liberty Linux 8 VendorSUSE Affected ? to before 2.0.3-2.el8_10.3 Fixed in 2.0.3-2.el8_10.3 Patch available CNA
  • SUSE Liberty Linux 8 VendorSUSE Affected ? to before 2.0.3-2.el8_10.3 Fixed in 2.0.3-2.el8_10.3 Patch available CNA
  • SUSE Liberty Linux 9 VendorSUSE Affected ? to before 2.0.3-12.el9_8.3 Fixed in 2.0.3-12.el9_8.3 Patch available CNA
  • SUSE Liberty Linux 9 VendorSUSE Affected ? to before 2.0.3-12.el9_8.3 Fixed in 2.0.3-12.el9_8.3 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Desktop 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Module for Basesystem 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 12 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP4-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP5-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 15 SP6-LTSS VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP applications 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP applications 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 VendorSUSE Affected ? to before 2.0.3-3.6.1 Fixed in 2.0.3-3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Proxy LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Retail Branch Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • SUSE Manager Server LTS 4.3 VendorSUSE Affected ? to before 2.0.3-150000.3.6.1 Fixed in 2.0.3-150000.3.6.1 Patch available CNA
  • openSUSE Leap 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • openSUSE Leap 16.0 VendorSUSE Affected ? to before 2.0.7-160000.5.1 Fixed in 2.0.7-160000.5.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • openSUSE Tumbleweed VendorSUSE Affected ? to before 2.0.7-3.1 Fixed in 2.0.7-3.1 Patch available CNA
  • libXfont2 VendorlibXfont2 Affected ? – 2.0.8 Fixed in — No fix listed CNA

Remediation

  • Fix · CNA Container suse/kiosk/tigervnc-x11vnc:1.14-63.8 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Container suse/kiosk/xorg:21.1-83.7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Azure-3P (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAP-Hardened-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP6-SAPCAL-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Azure-3P (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-GCE-3P (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-BYOS-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-BYOS-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-BYOS-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAP-Hardened-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAPCAL-Azure (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAPCAL-EC2 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES15-SP7-SAPCAL-GCE (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA Image SLES-SAP-Azure (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-Azure-3P (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-BYOS-Azure (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-BYOS-EC2 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-BYOS-GCE (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-GCE (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAP-GCE-3P (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES-SAPCAL-GCE (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA Image SLES12-SP5-Azure-SAP-BYOS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-Azure-SAP-On-Demand (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-EC2-SAP-BYOS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-EC2-SAP-On-Demand (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-GCE-SAP-BYOS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA Image SLES12-SP5-GCE-SAP-On-Demand (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA SUSE Liberty Linux 10 (SUSE) Fixed in 2.0.6-5.el10_2.3
  • Fix · CNA SUSE Liberty Linux 10 (SUSE) Fixed in 2.0.6-5.el10_2.3
  • Fix · CNA SUSE Liberty Linux 8 (SUSE) Fixed in 2.0.3-2.el8_10.3
  • Fix · CNA SUSE Liberty Linux 8 (SUSE) Fixed in 2.0.3-2.el8_10.3
  • Fix · CNA SUSE Liberty Linux 9 (SUSE) Fixed in 2.0.3-12.el9_8.3
  • Fix · CNA SUSE Liberty Linux 9 (SUSE) Fixed in 2.0.3-12.el9_8.3
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Desktop 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Module for Basesystem 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP7 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 12 SP5-LTSS (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP4-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP5-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 15 SP6-LTSS (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP applications 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP applications 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (SUSE) Fixed in 2.0.3-3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP4 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP5 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Linux Enterprise Server for SAP Applications 15 SP6 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Proxy LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Retail Branch Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA SUSE Manager Server LTS 4.3 (SUSE) Fixed in 2.0.3-150000.3.6.1
  • Fix · CNA openSUSE Leap 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA openSUSE Leap 16.0 (SUSE) Fixed in 2.0.7-160000.5.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1
  • Fix · CNA openSUSE Tumbleweed (SUSE) Fixed in 2.0.7-3.1

Red Hat 11 advisories

  • RHSA-2026:62231 Released 2026-09-01 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) libXfont2-2.0.3-3.el7_9, libXfont2-2.0.3-3.el7_9.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) libXfont2-devel-2.0.3-3.el7_9, libXfont2-devel-2.0.3-3.el7_9.ppc
  • RHSA-2026:62123 Released 2026-09-01 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) libXfont2-2.0.6-5.el10_0.2
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libXfont2-devel-2.0.6-5.el10_0.2
  • RHSA-2026:61995 Released 2026-09-01 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) libXfont2-2.0.3-2.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libXfont2-2.0.3-2.el8_4.2
Show 8 more Red Hat advisories
  • RHSA-2026:61756 Released 2026-08-31 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) libXfont2-2.0.3-2.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) libXfont2-2.0.3-2.el8_8.2
  • RHSA-2026:61755 Released 2026-08-31 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) libXfont2-2.0.3-2.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libXfont2-2.0.3-2.el8_6.2
  • RHSA-2026:61390 Released 2026-08-31 · Red Hat rating Important
    libXfont2 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) libXfont2-devel-2.0.3-12.el9_6.3
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) libXfont2-2.0.3-12.el9_6.3
  • RHSA-2026:59312 Released 2026-08-25 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) libXfont2-2.0.3-12.el9_4.3
  • RHSA-2026:59311 Released 2026-08-25 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) libXfont2-2.0.3-12.el9_2.3
  • RHSA-2026:55447 Released 2026-08-17 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) libXfont2-2.0.3-12.el9_8.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libXfont2-devel-2.0.3-12.el9_8.3
  • RHSA-2026:55448 Released 2026-08-17 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream (v. 10) libXfont2-2.0.6-5.el10_2.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libXfont2-devel-2.0.6-5.el10_2.3
  • RHSA-2026:55446 Released 2026-08-17 · Red Hat rating Important
    libXfont2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libXfont2-2.0.3-2.el8_10.3
    • Red Hat Enterprise Linux CRB (v. 8) libXfont2-devel-2.0.3-2.el8_10.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SUSE Container suse/kiosk/tigervnc-x11vnc:1.14-63.8, Container suse/kiosk/xorg:21.1-83.7 and 77 more products 2.0.3-12.el9_8.3, 2.0.3-150000.3.6.1 and 5 more versions

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-32816 fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2Priority MEDIUM 42
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:61390
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:55448
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:55446
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:55447
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:61995
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:61755
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:61756
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:59311
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:59312
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:62123
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:61390
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:61995
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:61755
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:61756
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:55446
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:55448
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:55447
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:62123
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:62231
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:62231

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-59679
  2. 2026-10-03 Alias added: GHSA-g44m-wpf7-gr7x

References

Other 1

  • TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences