Most recent entries from all

ALSA-2026:47079 — Important: libXfont2 security update

Affected: AlmaLinux:10: libXfont2, AlmaLinux:10: libXfont2-devel

X.Org X11 libXfont2 runtime library

Security Fix(es):

* libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001) * libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-56002

Affected: Alpaquita:23: libxfont2, Alpaquita:25: libxfont2, Alpaquita:stream: libxfont2

certfr-2026-avi-0873 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque…

certfr-2026-avi-0873

EUVD-2026-335158

fkie_cve-2026-56002

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

GHSA-r49w-hq6h-2w8q

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

msrc_CVE-2026-56002 — libXfont2 PCF Font Parsing Heap Buffer Overflow

msrc_CVE-2026-56002

OESA-2026-3055 — libXfont2 security update

Affected: openEuler:22.03-LTS-SP4: libXfont2, openEuler:24.03-LTS-SP1: libXfont2, openEuler:24.03-LTS-SP3: libXfont2, openEuler:24.03-LTS-SP4: libXfont2, openEuler:20.03-LTS-SP4: libXfont2

libXfont provides the core of the legacy X11 font system, handling the index files (fonts.dir, fonts.alias, fonts.scale), the various font file formats, and rasterizing them. contains runtime library. Security Fix(es):

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server context.(CVE-2026-56001)

A heap buffer overflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.(CVE-2026-56002)

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.(CVE-2026-56003)

openSUSE-SU-2026:11233-1 — libXfont2-2-2.0.7-2.1 on GA media

libXfont2-2-2.0.7-2.1 on GA media

RHSA-2026:51058 — Red Hat Security Advisory: libXfont2 security update

libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow libXfont2: PCF Font Parsing Heap Buffer Overflow libXfont2: computeProps Property Buffer Heap Buffer Overflow

RLSA-2026:47079 — Important: libXfont2 security update

Affected: Rocky Linux:10: libXfont2

X.Org X11 libXfont2 runtime library

Security Fix(es):

* libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)

* libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:22614-1 — Security update for libXfont2

Security update for libXfont2

UBUNTU-CVE-2026-56002

Affected: Ubuntu:Pro:14.04:LTS: libxfont, Ubuntu:Pro:16.04:LTS: libxfont, Ubuntu:16.04:LTS: libxfont2, Ubuntu:Pro:18.04:LTS: libxfont, Ubuntu:Pro:20.04:LTS: libxfont, Ubuntu:22.04:LTS: libxfont, Ubuntu:24.04:LTS: libxfont, Ubuntu:25.10: libxfont, Ubuntu:26.04:LTS: libxfont

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

WID-SEC-W-2026-2378 — X.Org X11 Server (libXfont2): Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrato…

Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 ausnutzen, um erweiterte Berechtigungen zu erlangen und beliebigen Code mit Root-Rechten auszuführen.