Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
alsa-2026:55446
Vulnerability from osv_almalinux
Published
2026-08-17 00:00
Modified
2026-08-18 08:47
Summary
Important: libXfont2 security update
Details
X.Org X11 libXfont2 runtime library
Security Fix(es):
- libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
- libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libXfont2"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.3-2.el8_10.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libXfont2-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.3-2.el8_10.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "X.Org X11 libXfont2 runtime library \n\nSecurity Fix(es): \n\n * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:55446",
"modified": "2026-08-18T08:47:06Z",
"published": "2026-08-17T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:55446"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-44950"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-59679"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2509620"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2509622"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2026-55446.html"
}
],
"related": [
"CVE-2026-59679",
"CVE-2026-44950"
],
"summary": "Important: libXfont2 security update"
}
alsa-2026:55447
Vulnerability from osv_almalinux
Published
2026-08-17 00:00
Modified
2026-08-18 08:50
Summary
Important: libXfont2 security update
Details
X.Org X11 libXfont2 runtime library
Security Fix(es):
- libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
- libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
| URL | Type | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "libXfont2"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.3-12.el9_8.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "libXfont2-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.3-12.el9_8.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "X.Org X11 libXfont2 runtime library \n\nSecurity Fix(es): \n\n * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:55447",
"modified": "2026-08-18T08:50:53Z",
"published": "2026-08-17T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:55447"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-44950"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-59679"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2509620"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2509622"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/9/ALSA-2026-55447.html"
}
],
"related": [
"CVE-2026-59679",
"CVE-2026-44950"
],
"summary": "Important: libXfont2 security update"
}
alsa-2026:55448
Vulnerability from osv_almalinux
Published
2026-08-17 00:00
Modified
2026-08-18 08:55
Summary
Important: libXfont2 security update
Details
X.Org X11 libXfont2 runtime library
Security Fix(es):
- libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
- libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
| URL | Type | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "libXfont2"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.6-5.el10_2.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:10",
"name": "libXfont2-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.6-5.el10_2.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "X.Org X11 libXfont2 runtime library \n\nSecurity Fix(es): \n\n * libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n * libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:55448",
"modified": "2026-08-18T08:55:38Z",
"published": "2026-08-17T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:55448"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-44950"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-59679"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2509620"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2509622"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/10/ALSA-2026-55448.html"
}
],
"related": [
"CVE-2026-59679",
"CVE-2026-44950"
],
"summary": "Important: libXfont2 security update"
}
OPENSUSE-SU-2026:11463-1
Vulnerability from csaf_opensuse - Published: 2026-08-06 00:00 - Updated: 2026-08-06 00:00Summary
libXfont2-2-2.0.7-3.1 on GA media
Severity
Moderate
Notes
Title of the patch: libXfont2-2-2.0.7-3.1 on GA media
Description of the patch: These are all security issues fixed in the libXfont2-2-2.0.7-3.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11463
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
References
9 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://www.suse.com/security/cve/CVE-2026-44950/ | self |
| https://www.suse.com/security/cve/CVE-2026-59679/ | self |
| https://www.suse.com/security/cve/CVE-2026-44950 | external |
| https://bugzilla.suse.com/1268514 | external |
| https://bugzilla.suse.com/1272661 | external |
| https://www.suse.com/security/cve/CVE-2026-59679 | external |
| https://bugzilla.suse.com/1272660 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libXfont2-2-2.0.7-3.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libXfont2-2-2.0.7-3.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11463",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11463-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59679/"
}
],
"title": "libXfont2-2-2.0.7-3.1 on GA media",
"tracking": {
"current_release_date": "2026-08-06T00:00:00Z",
"generator": {
"date": "2026-08-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11463-1",
"initial_release_date": "2026-08-06T00:00:00Z",
"revision_history": [
{
"date": "2026-08-06T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.7-3.1.aarch64",
"product": {
"name": "libXfont2-2-2.0.7-3.1.aarch64",
"product_id": "libXfont2-2-2.0.7-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libXfont2-2-32bit-2.0.7-3.1.aarch64",
"product": {
"name": "libXfont2-2-32bit-2.0.7-3.1.aarch64",
"product_id": "libXfont2-2-32bit-2.0.7-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.7-3.1.aarch64",
"product": {
"name": "libXfont2-devel-2.0.7-3.1.aarch64",
"product_id": "libXfont2-devel-2.0.7-3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"product": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"product_id": "libXfont2-devel-32bit-2.0.7-3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.7-3.1.ppc64le",
"product": {
"name": "libXfont2-2-2.0.7-3.1.ppc64le",
"product_id": "libXfont2-2-2.0.7-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"product": {
"name": "libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"product_id": "libXfont2-2-32bit-2.0.7-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.7-3.1.ppc64le",
"product": {
"name": "libXfont2-devel-2.0.7-3.1.ppc64le",
"product_id": "libXfont2-devel-2.0.7-3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"product": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"product_id": "libXfont2-devel-32bit-2.0.7-3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.7-3.1.s390x",
"product": {
"name": "libXfont2-2-2.0.7-3.1.s390x",
"product_id": "libXfont2-2-2.0.7-3.1.s390x"
}
},
{
"category": "product_version",
"name": "libXfont2-2-32bit-2.0.7-3.1.s390x",
"product": {
"name": "libXfont2-2-32bit-2.0.7-3.1.s390x",
"product_id": "libXfont2-2-32bit-2.0.7-3.1.s390x"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.7-3.1.s390x",
"product": {
"name": "libXfont2-devel-2.0.7-3.1.s390x",
"product_id": "libXfont2-devel-2.0.7-3.1.s390x"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-32bit-2.0.7-3.1.s390x",
"product": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.s390x",
"product_id": "libXfont2-devel-32bit-2.0.7-3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.7-3.1.x86_64",
"product": {
"name": "libXfont2-2-2.0.7-3.1.x86_64",
"product_id": "libXfont2-2-2.0.7-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-2-32bit-2.0.7-3.1.x86_64",
"product": {
"name": "libXfont2-2-32bit-2.0.7-3.1.x86_64",
"product_id": "libXfont2-2-32bit-2.0.7-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.7-3.1.x86_64",
"product": {
"name": "libXfont2-devel-2.0.7-3.1.x86_64",
"product_id": "libXfont2-devel-2.0.7-3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-32bit-2.0.7-3.1.x86_64",
"product": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.x86_64",
"product_id": "libXfont2-devel-32bit-2.0.7-3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.7-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64"
},
"product_reference": "libXfont2-2-2.0.7-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.7-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le"
},
"product_reference": "libXfont2-2-2.0.7-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.7-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x"
},
"product_reference": "libXfont2-2-2.0.7-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.7-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64"
},
"product_reference": "libXfont2-2-2.0.7-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-32bit-2.0.7-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64"
},
"product_reference": "libXfont2-2-32bit-2.0.7-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-32bit-2.0.7-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le"
},
"product_reference": "libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-32bit-2.0.7-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x"
},
"product_reference": "libXfont2-2-32bit-2.0.7-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-32bit-2.0.7-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64"
},
"product_reference": "libXfont2-2-32bit-2.0.7-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.7-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64"
},
"product_reference": "libXfont2-devel-2.0.7-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.7-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le"
},
"product_reference": "libXfont2-devel-2.0.7-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.7-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x"
},
"product_reference": "libXfont2-devel-2.0.7-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.7-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64"
},
"product_reference": "libXfont2-devel-2.0.7-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64"
},
"product_reference": "libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le"
},
"product_reference": "libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x"
},
"product_reference": "libXfont2-devel-32bit-2.0.7-3.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-32bit-2.0.7-3.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
},
"product_reference": "libXfont2-devel-32bit-2.0.7-3.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44950"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44950",
"url": "https://www.suse.com/security/cve/CVE-2026-44950"
},
{
"category": "external",
"summary": "SUSE Bug 1268514 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1268514"
},
{
"category": "external",
"summary": "SUSE Bug 1272661 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1272661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-06T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-44950"
},
{
"cve": "CVE-2026-59679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59679"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59679",
"url": "https://www.suse.com/security/cve/CVE-2026-59679"
},
{
"category": "external",
"summary": "SUSE Bug 1272660 for CVE-2026-59679",
"url": "https://bugzilla.suse.com/1272660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-2-32bit-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-2.0.7-3.1.x86_64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.aarch64",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.ppc64le",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.s390x",
"openSUSE Tumbleweed:libXfont2-devel-32bit-2.0.7-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-06T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-59679"
}
]
}
RHSA-2026:55447
Vulnerability from csaf_opensuse - Published: 2026-08-17 00:00 - Updated: 2026-08-17 00:00Summary
security update for libXfont2
Severity
Important
Notes
Title of the patch: security update for libXfont2
Description of the patch: This security update provides a functional equivalent of RHSA-2026:55447.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:55447.
Patchnames: RHSA-2026:55447
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9 (Critical)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9 (Critical)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
References
9 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/r… | self |
| https://www.suse.com/security/cve/CVE-2026-44950/ | self |
| https://www.suse.com/security/cve/CVE-2026-59679/ | self |
| https://www.suse.com/security/cve/CVE-2026-44950 | external |
| https://bugzilla.suse.com/1268514 | external |
| https://bugzilla.suse.com/1272661 | external |
| https://www.suse.com/security/cve/CVE-2026-59679 | external |
| https://bugzilla.suse.com/1272660 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for libXfont2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:55447.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:55447.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:55447",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_55447.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59679/"
}
],
"title": "security update for libXfont2",
"tracking": {
"current_release_date": "2026-08-17T00:00:00Z",
"generator": {
"date": "2026-08-17T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:55447",
"initial_release_date": "2026-08-17T00:00:00Z",
"revision_history": [
{
"date": "2026-08-17T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2.0.3-12.el9_8.3.i686",
"product": {
"name": "libXfont2-2.0.3-12.el9_8.3.i686",
"product_id": "libXfont2-2.0.3-12.el9_8.3.i686"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-12.el9_8.3.i686",
"product": {
"name": "libXfont2-devel-2.0.3-12.el9_8.3.i686",
"product_id": "libXfont2-devel-2.0.3-12.el9_8.3.i686"
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2.0.3-12.el9_8.3.x86_64",
"product": {
"name": "libXfont2-2.0.3-12.el9_8.3.x86_64",
"product_id": "libXfont2-2.0.3-12.el9_8.3.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-12.el9_8.3.x86_64",
"product": {
"name": "libXfont2-devel-2.0.3-12.el9_8.3.x86_64",
"product_id": "libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2.0.3-12.el9_8.3.i686 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686"
},
"product_reference": "libXfont2-2.0.3-12.el9_8.3.i686",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2.0.3-12.el9_8.3.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64"
},
"product_reference": "libXfont2-2.0.3-12.el9_8.3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.3-12.el9_8.3.i686 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686"
},
"product_reference": "libXfont2-devel-2.0.3-12.el9_8.3.i686",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.3-12.el9_8.3.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
},
"product_reference": "libXfont2-devel-2.0.3-12.el9_8.3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44950"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44950",
"url": "https://www.suse.com/security/cve/CVE-2026-44950"
},
{
"category": "external",
"summary": "SUSE Bug 1268514 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1268514"
},
{
"category": "external",
"summary": "SUSE Bug 1272661 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1272661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-17T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-44950"
},
{
"cve": "CVE-2026-59679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59679"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59679",
"url": "https://www.suse.com/security/cve/CVE-2026-59679"
},
{
"category": "external",
"summary": "SUSE Bug 1272660 for CVE-2026-59679",
"url": "https://bugzilla.suse.com/1272660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-2.0.3-12.el9_8.3.x86_64",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.i686",
"SUSE Liberty Linux 9:libXfont2-devel-2.0.3-12.el9_8.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-17T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-59679"
}
]
}
RHSA-2026:55448
Vulnerability from csaf_opensuse - Published: 2026-08-17 00:00 - Updated: 2026-08-17 00:00Summary
security update for libXfont2
Severity
Important
Notes
Title of the patch: security update for libXfont2
Description of the patch: This security update provides a functional equivalent of RHSA-2026:55448.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:55448.
Patchnames: RHSA-2026:55448
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9 (Critical)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9 (Critical)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
References
9 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/r… | self |
| https://www.suse.com/security/cve/CVE-2026-44950/ | self |
| https://www.suse.com/security/cve/CVE-2026-59679/ | self |
| https://www.suse.com/security/cve/CVE-2026-44950 | external |
| https://bugzilla.suse.com/1268514 | external |
| https://bugzilla.suse.com/1272661 | external |
| https://www.suse.com/security/cve/CVE-2026-59679 | external |
| https://bugzilla.suse.com/1272660 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for libXfont2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:55448.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:55448.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:55448",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_55448.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59679/"
}
],
"title": "security update for libXfont2",
"tracking": {
"current_release_date": "2026-08-17T00:00:00Z",
"generator": {
"date": "2026-08-17T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:55448",
"initial_release_date": "2026-08-17T00:00:00Z",
"revision_history": [
{
"date": "2026-08-17T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2.0.6-5.el10_2.3.x86_64",
"product": {
"name": "libXfont2-2.0.6-5.el10_2.3.x86_64",
"product_id": "libXfont2-2.0.6-5.el10_2.3.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.6-5.el10_2.3.x86_64",
"product": {
"name": "libXfont2-devel-2.0.6-5.el10_2.3.x86_64",
"product_id": "libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 10",
"product": {
"name": "SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:10"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2.0.6-5.el10_2.3.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64"
},
"product_reference": "libXfont2-2.0.6-5.el10_2.3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-2.0.6-5.el10_2.3.x86_64 as component of SUSE Liberty Linux 10",
"product_id": "SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
},
"product_reference": "libXfont2-devel-2.0.6-5.el10_2.3.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44950"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64",
"SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44950",
"url": "https://www.suse.com/security/cve/CVE-2026-44950"
},
{
"category": "external",
"summary": "SUSE Bug 1268514 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1268514"
},
{
"category": "external",
"summary": "SUSE Bug 1272661 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1272661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64",
"SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64",
"SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-17T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-44950"
},
{
"cve": "CVE-2026-59679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59679"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64",
"SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59679",
"url": "https://www.suse.com/security/cve/CVE-2026-59679"
},
{
"category": "external",
"summary": "SUSE Bug 1272660 for CVE-2026-59679",
"url": "https://bugzilla.suse.com/1272660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64",
"SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 10:libXfont2-2.0.6-5.el10_2.3.x86_64",
"SUSE Liberty Linux 10:libXfont2-devel-2.0.6-5.el10_2.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-17T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-59679"
}
]
}
RHSA-2026:55446
Vulnerability from csaf_redhat - Published: 2026-08-17 03:24 - Updated: 2026-08-17 10:07Summary
Red Hat Security Advisory: libXfont2 security update
Severity
Important
Notes
Topic: An update for libXfont2 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: X.Org X11 libXfont2 runtime library
Security Fix(es):
* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.
7.5 (High)
Affected products
Fixed
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.
7.5 (High)
Affected products
Fixed
31 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
13 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:55446 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2509620 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2509622 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-44950 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2509622 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-44950 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-44950 | external |
| https://access.redhat.com/security/cve/CVE-2026-59679 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2509620 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-59679 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-59679 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libXfont2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:55446",
"url": "https://access.redhat.com/errata/RHSA-2026:55446"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2509620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
},
{
"category": "external",
"summary": "2509622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55446.json"
}
],
"title": "Red Hat Security Advisory: libXfont2 security update",
"tracking": {
"current_release_date": "2026-08-17T10:07:10+00:00",
"generator": {
"date": "2026-08-17T10:07:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:55446",
"initial_release_date": "2026-08-17T03:24:59+00:00",
"revision_history": [
{
"date": "2026-08-17T03:24:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-17T03:24:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-17T10:07:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-0:2.0.3-2.el8_10.3.i686",
"product": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.i686",
"product_id": "libXfont2-0:2.0.3-2.el8_10.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"product": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"product": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"product": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"product": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"product_id": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"product": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"product": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
"product": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
"product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
"product": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
"product_id": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"product": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"product": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"product": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-0:2.0.3-2.el8_10.3.src",
"product": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.src",
"product_id": "libXfont2-0:2.0.3-2.el8_10.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"product": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"product_id": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"product": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"product": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"product": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"product": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"product_id": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2@2.0.3-2.el8_10.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"product": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"product_id": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debugsource@2.0.3-2.el8_10.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"product": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"product_id": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-debuginfo@2.0.3-2.el8_10.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"product": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"product_id": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libXfont2-devel@2.0.3-2.el8_10.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64"
},
"product_reference": "libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686"
},
"product_reference": "libXfont2-0:2.0.3-2.el8_10.3.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le"
},
"product_reference": "libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x"
},
"product_reference": "libXfont2-0:2.0.3-2.el8_10.3.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src"
},
"product_reference": "libXfont2-0:2.0.3-2.el8_10.3.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64"
},
"product_reference": "libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64"
},
"product_reference": "libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64"
},
"product_reference": "libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64"
},
"product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686"
},
"product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le"
},
"product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x"
},
"product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
},
"product_reference": "libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44950",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-30T21:49:45.599000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509622"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fs_read_glyphs() function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the intended buffer. If the X server runs as a privileged user, this could result in privilege escalation, allowing an attacker to gain higher access. If the X server runs as an unprivileged user, it could lead to a denial of service, causing the system to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A heap buffer overflow in the `libXfont2` font server client can be triggered by a malicious font server. If the X server runs as root, this could lead to privilege escalation; otherwise, it results in a denial of service. Red Hat Enterprise Linux typically runs the X server as an unprivileged user, mitigating the privilege escalation risk but still allowing for denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44950"
},
{
"category": "external",
"summary": "RHBZ#2509622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44950"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44950"
}
],
"release_date": "2026-08-05T10:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T03:24:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55446"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client"
},
{
"cve": "CVE-2026-59679",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-30T21:28:38.411000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509620"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privilege escalation if the X server runs with root privileges, or a denial of service (crash) if it runs as an unprivileged user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in libXfont2 could lead to privilege escalation or denial of service. A remote attacker operating a malicious font server could exploit an out-of-bounds memory access in the font-server client. This is rated Important because while privilege escalation requires the X server to run as root (not a default in modern Red Hat Enterprise Linux), denial of service remains a risk for users of graphical environments who connect to untrusted font servers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59679"
},
{
"category": "external",
"summary": "RHBZ#2509620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59679"
}
],
"release_date": "2026-08-05T10:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T03:24:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55446"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.src",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debuginfo-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-debugsource-0:2.0.3-2.el8_10.3.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.i686",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libXfont2-devel-0:2.0.3-2.el8_10.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write"
}
]
}
rlsa-2026:55446
Vulnerability from osv_rocky
Published
2026-08-17 18:01
Modified
2026-08-24 18:09
Summary
Important: libXfont2 security update
Details
X.Org X11 libXfont2 runtime library
Security Fix(es):
-
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
-
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
7.5 (High)
References
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:8",
"name": "libXfont2",
"purl": "pkg:rpm/rocky-linux/libXfont2?distro=rocky-linux-8\u0026epoch=0"
},
"ranges": [
{
"database_specific": {
"yum_repository": "AppStream"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.0.3-2.el8_10.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"database_specific": {
"license": "CC-BY-4.0",
"license_url": "https://creativecommons.org/licenses/by/4.0/",
"source_advisory": "RHSA-2026:55446"
},
"details": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:55446",
"modified": "2026-08-24T18:09:33.835419Z",
"published": "2026-08-17T18:01:12.967623Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:55446"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:55446"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: libXfont2 security update",
"upstream": [
"CVE-2026-44950",
"CVE-2026-59679"
]
}
rlsa-2026:55447
Vulnerability from osv_rocky
Published
2026-08-17 18:03
Modified
2026-08-24 18:09
Summary
Important: libXfont2 security update
Details
X.Org X11 libXfont2 runtime library
Security Fix(es):
-
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
-
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
7.5 (High)
References
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:9",
"name": "libXfont2",
"purl": "pkg:rpm/rocky-linux/libXfont2?distro=rocky-linux-9\u0026epoch=0"
},
"ranges": [
{
"database_specific": {
"yum_repository": "AppStream"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.0.3-12.el9_8.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"database_specific": {
"license": "CC-BY-4.0",
"license_url": "https://creativecommons.org/licenses/by/4.0/",
"source_advisory": "RHSA-2026:55447"
},
"details": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:55447",
"modified": "2026-08-24T18:09:38.540636Z",
"published": "2026-08-17T18:03:57.407277Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:55447"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:55447"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: libXfont2 security update",
"upstream": [
"CVE-2026-44950",
"CVE-2026-59679"
]
}
rlsa-2026:55448
Vulnerability from osv_rocky
Published
2026-08-17 18:06
Modified
2026-08-24 18:09
Summary
Important: libXfont2 security update
Details
X.Org X11 libXfont2 runtime library
Security Fix(es):
-
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)
-
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
7.5 (High)
References
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:10",
"name": "libXfont2",
"purl": "pkg:rpm/rocky-linux/libXfont2?distro=rocky-linux-10\u0026epoch=0"
},
"ranges": [
{
"database_specific": {
"yum_repository": "AppStream"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.0.6-5.el10_2.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"database_specific": {
"license": "CC-BY-4.0",
"license_url": "https://creativecommons.org/licenses/by/4.0/",
"source_advisory": "RHSA-2026:55448"
},
"details": "X.Org X11 libXfont2 runtime library\n\nSecurity Fix(es):\n\n* libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write (CVE-2026-59679)\n\n* libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client (CVE-2026-44950)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:55448",
"modified": "2026-08-24T18:09:41.695390Z",
"published": "2026-08-17T18:06:54.076078Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:55448"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509620"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509622"
},
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:55448"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: libXfont2 security update",
"upstream": [
"CVE-2026-44950",
"CVE-2026-59679"
]
}
SUSE-SU-2026:3499-1
Vulnerability from csaf_suse - Published: 2026-08-05 11:56 - Updated: 2026-08-05 11:56Summary
Security update for libXfont2
Severity
Critical
Notes
Title of the patch: Security update for libXfont2
Description of the patch: This update for libXfont2 fixes the following issues:
- CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661).
- CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).
Patchnames: SUSE-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3499
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9 (Critical)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9 (Critical)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
References
13 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/s… | self |
| https://www.suse.com/support/update/announcement/… | self |
| https://lists.suse.com/pipermail/sle-security-upd… | self |
| https://bugzilla.suse.com/1272660 | self |
| https://bugzilla.suse.com/1272661 | self |
| https://www.suse.com/security/cve/CVE-2026-44950/ | self |
| https://www.suse.com/security/cve/CVE-2026-59679/ | self |
| https://www.suse.com/security/cve/CVE-2026-44950 | external |
| https://bugzilla.suse.com/1268514 | external |
| https://bugzilla.suse.com/1272661 | external |
| https://www.suse.com/security/cve/CVE-2026-59679 | external |
| https://bugzilla.suse.com/1272660 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libXfont2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libXfont2 fixes the following issues:\n\n- CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661).\n- CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#1272660).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-2026-3499,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3499",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3499-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:3499-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263499-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:3499-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028148.html"
},
{
"category": "self",
"summary": "SUSE Bug 1272660",
"url": "https://bugzilla.suse.com/1272660"
},
{
"category": "self",
"summary": "SUSE Bug 1272661",
"url": "https://bugzilla.suse.com/1272661"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59679/"
}
],
"title": "Security update for libXfont2",
"tracking": {
"current_release_date": "2026-08-05T11:56:49Z",
"generator": {
"date": "2026-08-05T11:56:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:3499-1",
"initial_release_date": "2026-08-05T11:56:49Z",
"revision_history": [
{
"date": "2026-08-05T11:56:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.3-3.6.1.aarch64",
"product": {
"name": "libXfont2-2-2.0.3-3.6.1.aarch64",
"product_id": "libXfont2-2-2.0.3-3.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-3.6.1.aarch64",
"product": {
"name": "libXfont2-devel-2.0.3-3.6.1.aarch64",
"product_id": "libXfont2-devel-2.0.3-3.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-64bit-2.0.3-3.6.1.aarch64_ilp32",
"product": {
"name": "libXfont2-2-64bit-2.0.3-3.6.1.aarch64_ilp32",
"product_id": "libXfont2-2-64bit-2.0.3-3.6.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-64bit-2.0.3-3.6.1.aarch64_ilp32",
"product": {
"name": "libXfont2-devel-64bit-2.0.3-3.6.1.aarch64_ilp32",
"product_id": "libXfont2-devel-64bit-2.0.3-3.6.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.3-3.6.1.i586",
"product": {
"name": "libXfont2-2-2.0.3-3.6.1.i586",
"product_id": "libXfont2-2-2.0.3-3.6.1.i586"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-3.6.1.i586",
"product": {
"name": "libXfont2-devel-2.0.3-3.6.1.i586",
"product_id": "libXfont2-devel-2.0.3-3.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.3-3.6.1.ppc64le",
"product": {
"name": "libXfont2-2-2.0.3-3.6.1.ppc64le",
"product_id": "libXfont2-2-2.0.3-3.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-3.6.1.ppc64le",
"product": {
"name": "libXfont2-devel-2.0.3-3.6.1.ppc64le",
"product_id": "libXfont2-devel-2.0.3-3.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.3-3.6.1.s390",
"product": {
"name": "libXfont2-2-2.0.3-3.6.1.s390",
"product_id": "libXfont2-2-2.0.3-3.6.1.s390"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-3.6.1.s390",
"product": {
"name": "libXfont2-devel-2.0.3-3.6.1.s390",
"product_id": "libXfont2-devel-2.0.3-3.6.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.3-3.6.1.s390x",
"product": {
"name": "libXfont2-2-2.0.3-3.6.1.s390x",
"product_id": "libXfont2-2-2.0.3-3.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libXfont2-2-32bit-2.0.3-3.6.1.s390x",
"product": {
"name": "libXfont2-2-32bit-2.0.3-3.6.1.s390x",
"product_id": "libXfont2-2-32bit-2.0.3-3.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-3.6.1.s390x",
"product": {
"name": "libXfont2-devel-2.0.3-3.6.1.s390x",
"product_id": "libXfont2-devel-2.0.3-3.6.1.s390x"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-32bit-2.0.3-3.6.1.s390x",
"product": {
"name": "libXfont2-devel-32bit-2.0.3-3.6.1.s390x",
"product_id": "libXfont2-devel-32bit-2.0.3-3.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libXfont2-2-2.0.3-3.6.1.x86_64",
"product": {
"name": "libXfont2-2-2.0.3-3.6.1.x86_64",
"product_id": "libXfont2-2-2.0.3-3.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-2-32bit-2.0.3-3.6.1.x86_64",
"product": {
"name": "libXfont2-2-32bit-2.0.3-3.6.1.x86_64",
"product_id": "libXfont2-2-32bit-2.0.3-3.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-2.0.3-3.6.1.x86_64",
"product": {
"name": "libXfont2-devel-2.0.3-3.6.1.x86_64",
"product_id": "libXfont2-devel-2.0.3-3.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "libXfont2-devel-32bit-2.0.3-3.6.1.x86_64",
"product": {
"name": "libXfont2-devel-32bit-2.0.3-3.6.1.x86_64",
"product_id": "libXfont2-devel-32bit-2.0.3-3.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libXfont2-2-2.0.3-3.6.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
},
"product_reference": "libXfont2-2-2.0.3-3.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44950"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44950",
"url": "https://www.suse.com/security/cve/CVE-2026-44950"
},
{
"category": "external",
"summary": "SUSE Bug 1268514 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1268514"
},
{
"category": "external",
"summary": "SUSE Bug 1272661 for CVE-2026-44950",
"url": "https://bugzilla.suse.com/1272661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T11:56:49Z",
"details": "critical"
}
],
"title": "CVE-2026-44950"
},
{
"cve": "CVE-2026-59679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59679"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59679",
"url": "https://www.suse.com/security/cve/CVE-2026-59679"
},
{
"category": "external",
"summary": "SUSE Bug 1272660 for CVE-2026-59679",
"url": "https://bugzilla.suse.com/1272660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libXfont2-2-2.0.3-3.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T11:56:49Z",
"details": "critical"
}
],
"title": "CVE-2026-59679"
}
]
}
ubuntu-cve-2026-59679
Vulnerability from osv_ubuntu
Published
2026-08-05 00:00
Modified
2026-08-05 00:00
Summary
Details
[Font Server Client encoding Out-Of-Bounds Read/Write]
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont1",
"binary_version": "1:1.4.7-1ubuntu0.4+esm2"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:1.4.7-1ubuntu0.4+esm2?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:1.4.6-1",
"1:1.4.6-1ubuntu1",
"1:1.4.7-1",
"1:1.4.7-1ubuntu0.1",
"1:1.4.7-1ubuntu0.2",
"1:1.4.7-1ubuntu0.3",
"1:1.4.7-1ubuntu0.4",
"1:1.4.7-1ubuntu0.4+esm2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont1",
"binary_version": "1:1.5.1-1ubuntu0.16.04.4+esm2"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:1.5.1-1ubuntu0.16.04.4+esm2?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:1.5.1-1",
"1:1.5.1-1ubuntu0.16.04.1",
"1:1.5.1-1ubuntu0.16.04.2",
"1:1.5.1-1ubuntu0.16.04.3",
"1:1.5.1-1ubuntu0.16.04.4",
"1:1.5.1-1ubuntu0.16.04.4+esm2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont2",
"binary_version": "1:2.0.1-3~ubuntu16.04.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "libxfont2",
"purl": "pkg:deb/ubuntu/libxfont2@1:2.0.1-3~ubuntu16.04.3?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:2.0.1-3~ubuntu16.04.1",
"1:2.0.1-3~ubuntu16.04.2",
"1:2.0.1-3~ubuntu16.04.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont2",
"binary_version": "1:2.0.3-1ubuntu0.1~esm2"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:2.0.3-1ubuntu0.1~esm2?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:2.0.1-3ubuntu1",
"1:2.0.1-4",
"1:2.0.1-4ubuntu1",
"1:2.0.3-1",
"1:2.0.3-1ubuntu0.1~esm2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont2",
"binary_version": "1:2.0.3-1ubuntu0.20.04.1~esm2"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:2.0.3-1ubuntu0.20.04.1~esm2?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:2.0.3-1",
"1:2.0.3-1ubuntu0.20.04.1~esm2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont2",
"binary_version": "1:2.0.5-1ubuntu0.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:2.0.5-1ubuntu0.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:2.0.4-1build3",
"1:2.0.5-1",
"1:2.0.5-1build1",
"1:2.0.5-1ubuntu0.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont2",
"binary_version": "1:2.0.6-1+deb13u1build0.24.04.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:2.0.6-1+deb13u1build0.24.04.2?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:2.0.6-1",
"1:2.0.6-1build1",
"1:2.0.6-1+deb13u1build0.24.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libxfont2",
"binary_version": "1:2.0.6-2ubuntu0.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "libxfont",
"purl": "pkg:deb/ubuntu/libxfont@1:2.0.6-2ubuntu0.2?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1:2.0.6-1build1",
"1:2.0.6-1build2",
"1:2.0.6-2",
"1:2.0.6-2ubuntu0.2"
]
}
],
"aliases": [],
"details": "[Font Server Client encoding Out-Of-Bounds Read/Write]",
"id": "UBUNTU-CVE-2026-59679",
"modified": "2026-08-05T00:00:00Z",
"published": "2026-08-05T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-59679"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59679"
},
{
"type": "REPORT",
"url": "https://www.openwall.com/lists/oss-security/2026/08/05/1"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-59679"
]
}
WID-SEC-W-2026-2658
Vulnerability from csaf_certbund - Published: 2026-08-04 22:00 - Updated: 2026-08-05 22:00Summary
X.Org X11 (libXfont2): Mehrere Schwachstellen ermöglichen Privilegieneskalation und Denial of Service
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Das X Window System dient der Erzeugung grafischer Oberflächen auf Unix Systemen.
Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um seine Privilegien zu erhöhen, und um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme: - Linux
- UNIX
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source X.Org X11 libXfont2 <2.0.9
Open Source / X.Org X11
|
libXfont2 <2.0.9 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— |
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source X.Org X11 libXfont2 <2.0.9
Open Source / X.Org X11
|
libXfont2 <2.0.9 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— |
References
5 references
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Das X Window System dient der Erzeugung grafischer Oberfl\u00e4chen auf Unix Systemen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um seine Privilegien zu erh\u00f6hen, und um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-2658 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2658.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-2658 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2658"
},
{
"category": "external",
"summary": "X.Org Security Advisory vom 2026-08-04",
"url": "https://seclists.org/oss-sec/2026/q3/436"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:3500-1 vom 2026-08-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028147.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:3499-1 vom 2026-08-05",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028148.html"
}
],
"source_lang": "en-US",
"title": "X.Org X11 (libXfont2): Mehrere Schwachstellen erm\u00f6glichen Privilegieneskalation und Denial of Service",
"tracking": {
"current_release_date": "2026-08-05T22:00:00.000+00:00",
"generator": {
"date": "2026-08-06T08:52:37.373+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-2658",
"initial_release_date": "2026-08-04T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-08-04T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-08-05T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "libXfont2 \u003c2.0.9",
"product": {
"name": "Open Source X.Org X11 libXfont2 \u003c2.0.9",
"product_id": "T057547"
}
},
{
"category": "product_version",
"name": "libXfont2 2.0.9",
"product": {
"name": "Open Source X.Org X11 libXfont2 2.0.9",
"product_id": "T057547-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:x:x.org_x11:libxfont2__2.0.9"
}
}
}
],
"category": "product_name",
"name": "X.Org X11"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T054646",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44950",
"product_status": {
"known_affected": [
"T057547",
"T054646"
]
},
"release_date": "2026-08-04T22:00:00.000+00:00",
"title": "CVE-2026-44950"
},
{
"cve": "CVE-2026-59679",
"product_status": {
"known_affected": [
"T057547",
"T054646"
]
},
"release_date": "2026-08-04T22:00:00.000+00:00",
"title": "CVE-2026-59679"
}
]
}