https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:51:11.501475+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-16611 CVE-2017-16611 2026-10-06T08:51:11.569418+00:00

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

 https://cve.radiocsirt.org/vuln/usn-3500-1 USN-3500-1 — libxfont, libxfont1, libxfont2 vulnerability 2026-10-06T08:51:11.569494+00:00

Affected: Ubuntu:14.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont2

It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged user could use this issue to cause the X server to access arbitrary files, including special device files.