libXfont2-2.0.3-2.el8_10.1

エラータID: AXSA:2026-1404:01

Release date: 
Friday, July 31, 2026 - 16:36
Subject: 
libXfont2-2.0.3-2.el8_10.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

X.Org X11 libXfont2 runtime library

Security Fix(es):

* libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow (CVE-2026-56001)
* libXfont2: PCF Font Parsing Heap Buffer Overflow (CVE-2026-56002)
* libXfont2: computeProps Property Buffer Heap Buffer Overflow (CVE-2026-56003)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-56001
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont
CVE-2026-56002
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.
CVE-2026-56003
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libXfont2-2.0.3-2.el8_10.1.src.rpm
    MD5: e18aede2c7580c5e78d3c7ec4bc16c42
    SHA-256: 4364100916d028dd0d61458656926451d863be7fe6f9de061bf79203e3bf0240
    Size: 499.77 kB

Asianux Server 8 for x86_64
  1. libXfont2-2.0.3-2.el8_10.1.i686.rpm
    MD5: c46a400bea70c8fd8b96430094b587fb
    SHA-256: a25df15364548bb2ae52653e20bd08472a5ca696d71e966e658257a23cd53020
    Size: 148.38 kB
  2. libXfont2-2.0.3-2.el8_10.1.x86_64.rpm
    MD5: 9dc81a8e45531aa7501e32c18e006064
    SHA-256: 4269ead76731ce6118b84f300e782005a0180e60ceb17d2fc0bc1fe043432246
    Size: 147.87 kB
  3. libXfont2-devel-2.0.3-2.el8_10.1.i686.rpm
    MD5: 8ebe3f12b31de840f4fcc466127e0774
    SHA-256: 9ba1643d26fe874e13f14ce8a7f0115bfc3490f9d28c42b1e13dd880e4de1d15
    Size: 10.71 kB
  4. libXfont2-devel-2.0.3-2.el8_10.1.x86_64.rpm
    MD5: 0acebce847fe7d4a6e28f1c00de62b70
    SHA-256: ae62acb4853d0634389eec6b7f01e7e1147f5307f390d3adbb3b4100327f8ae3
    Size: 10.69 kB