libXfont2-2.0.3-2.el8_10.1
エラータID: AXSA:2026-1404:01
X.Org X11 libXfont2 runtime library
Security Fix(es):
* libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
* libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)
* libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-56001
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont
CVE-2026-56002
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
CVE-2026-56003
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
Update packages.
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
N/A
SRPMS
- libXfont2-2.0.3-2.el8_10.1.src.rpm
MD5: e18aede2c7580c5e78d3c7ec4bc16c42
SHA-256: 4364100916d028dd0d61458656926451d863be7fe6f9de061bf79203e3bf0240
Size: 499.77 kB
Asianux Server 8 for x86_64
- libXfont2-2.0.3-2.el8_10.1.i686.rpm
MD5: c46a400bea70c8fd8b96430094b587fb
SHA-256: a25df15364548bb2ae52653e20bd08472a5ca696d71e966e658257a23cd53020
Size: 148.38 kB - libXfont2-2.0.3-2.el8_10.1.x86_64.rpm
MD5: 9dc81a8e45531aa7501e32c18e006064
SHA-256: 4269ead76731ce6118b84f300e782005a0180e60ceb17d2fc0bc1fe043432246
Size: 147.87 kB - libXfont2-devel-2.0.3-2.el8_10.1.i686.rpm
MD5: 8ebe3f12b31de840f4fcc466127e0774
SHA-256: 9ba1643d26fe874e13f14ce8a7f0115bfc3490f9d28c42b1e13dd880e4de1d15
Size: 10.71 kB - libXfont2-devel-2.0.3-2.el8_10.1.x86_64.rpm
MD5: 0acebce847fe7d4a6e28f1c00de62b70
SHA-256: ae62acb4853d0634389eec6b7f01e7e1147f5307f390d3adbb3b4100327f8ae3
Size: 10.69 kB